PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-14760 radareorg CVE debrief

A use after free vulnerability was identified in radare2, a reverse engineering framework, in the regprofile handler. The vulnerability exists in the r_core_seek_arch_bits function of the libr/core/disasm.c file. Local access is required to exploit this vulnerability. The attack requires specific conditions to be met, and a patch has been made available to correct this issue. Users of radare2 should be aware of this vulnerability and take steps to patch their installations. The vulnerability has a CVSS score of 1.9 and a severity of LOW.

Vendor
radareorg
Product
radare2
CVSS
LOW 1.9
CISA KEV
Not listed in stored evidence
Original CVE published
2026-07-05
Original CVE updated
2026-07-07
Advisory published
2026-07-05
Advisory updated
2026-07-07

Who should care

Users of radare2, particularly those who utilize the regprofile handler, should be aware of this vulnerability and take steps to patch their installations. The vulnerability has a CVSS score of 1.9 and a severity of LOW. Operators, platform administrators, vulnerability management teams, and security teams should review the CVE record and take necessary actions to mitigate the vulnerability.

Technical summary

The vulnerability exists in the r_core_seek_arch_bits function of the libr/core/disasm.c file in radare2. A manipulation can lead to a use after free vulnerability. The attack requires local access and specific conditions to be met. The patch 8b25c773785d85cb0103410a0905089d286921c2 has been made available to correct this issue. Users of radare2 should be aware of this vulnerability and take steps to patch their installations.

Defensive priority

Medium

Recommended defensive actions

  • Apply the patch 8b25c773785d85cb0103410a0905089d286921c2 to radare2 installations.
  • Restrict access to the regprofile handler to authorized users only.
  • Monitor for any suspicious activity related to radare2.
  • Review compensating controls for exposed systems while remediation is scheduled and verified.
  • Check relevant monitoring, detection, and logs for exposed assets that need extra review.
  • Track exceptions, retest remediated assets, and close the item only after evidence is documented.
  • Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up.

Evidence notes

The CVE record was published on 2026-07-05T16:19:44.740Z and was last modified on 2026-07-07T22:30:32.980Z. The NVD entry is currently Analyzed. The vulnerability exists in radare2, a reverse engineering framework, specifically in the regprofile handler. The CVE record provides limited information about the vulnerability, and defenders should verify the affected scope and severity. The patch 8b25c773785d85cb0103410a0905089d286921c2 has been made available to correct this issue.

Official resources

AI-assisted PatchSiren debrief based on the supplied source corpus. The CVE record was published on 2026-07-05T16:19:44.740Z and has not been modified since then. The NVD entry is currently Analyzed.