CVE-2026-14758

A vulnerability was identified in radareorg radare2 up to 6.1.6. This vulnerability affects the function cmd_anal_opcode of the file libr/core/cmd_anal.inc.c of the component hexpairs Parser. Such manipulation leads to integer overflow. The attack needs to be performed locally. The exploit is publicly available and might be used. The name of the patch is 84e773986e7e5bb30453a9384f498ec0ccc9d0a9. A patch should be applied to remediate this issue.

• CWE-189
• CWE-190

• https://github.com/radareorg/radare2/Product
• https://github.com/radareorg/radare2/commit/84e773986e7e5bb30453a9384f498ec0ccc9d0a9Patch
• https://github.com/radareorg/radare2/issues/26042Exploit, Issue Tracking
• https://vuldb.com/cve/CVE-2026-14758Third Party Advisory, VDB Entry
• https://vuldb.com/submit/850382Third Party Advisory, VDB Entry
• https://vuldb.com/vuln/376347Third Party Advisory, VDB Entry
• https://vuldb.com/vuln/376347/ctiPermissions Required, VDB Entry

Published

Jul 5, 2026

Last Modified

Jul 9, 2026

Status

Analyzed

• CVE-2026-14752A security vulnerability has been detected in mjperpinosa st…3.5
• CVE-2026-14753A vulnerability was detected in mjperpinosa stumasy up to 32…7.3
• CVE-2026-14754A flaw has been found in code-projects Hotel and Tourism Res…7.3
• CVE-2026-14755A vulnerability has been found in code-projects Hotel and To…7.3
• CVE-2026-14756A vulnerability was found in code-projects Hotel and Tourism…7.3
• CVE-2026-14757A vulnerability was determined in radareorg radare2 up to 6.…5.3
• CVE-2026-14759A security flaw has been discovered in radareorg radare2 up …7.8
• CVE-2026-1476An out-of-band SQL injection vulnerability (OOB SQLi) has be…7.5
• CVE-2026-14760A weakness has been identified in radareorg radare2 up to 6.…7.8
• CVE-2026-14761A security vulnerability has been detected in radareorg rada…5.5
• CVE-2026-14762A vulnerability was detected in code-projects Hotel and Tour…7.3
• CVE-2026-14763A flaw has been found in code-projects Hotel and Tourism Res…7.3