{"affected":[{"product":"radare2","source":"CNA: GitHub_M","vendor":"radareorg","versions":[{"status":"affected","version":"< 6.2.2"}]}],"cveId":"CVE-2026-108387","cwes":["CWE-78"],"description":"radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.2, attacker-controlled data from several binary format plugins could reach RBinInfo->bclass. Opening or analyzing a crafted Pebble or Sega Mega Drive binary could place a dbg:// URI in bclass, causing radare2 to reopen the input through the debug input/output plugin and ultimately pass attacker-controlled arguments to execvp(). This could execute commands with the privileges of the radare2 process without an explicit debugging command. This issue is fixed in version 6.2.2.","epss":null,"exploits":[],"kev":null,"metrics":[{"score":8.5,"severity":"high","source":"CNA: GitHub_M","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","version":"4.0"},{"score":8.5,"severity":"high","source":"NVD: security-advisories@github.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0"}],"modifiedAt":1793834238320,"publishedAt":1793831219079,"references":[{"source":"CNA: GitHub_M","tags":["x_refsource_CONFIRM"],"url":"https://github.com/radareorg/radare2/security/advisories/GHSA-px7c-gwvj-73vf"},{"source":"CNA: GitHub_M","tags":["x_refsource_MISC"],"url":"https://github.com/radareorg/radare2/issues/26600"},{"source":"CNA: GitHub_M","tags":["x_refsource_MISC"],"url":"https://github.com/radareorg/radare2/commit/59899e6b8b18772ce9460b4caa2ced7f257fae76"},{"source":"CNA: GitHub_M","tags":["x_refsource_MISC"],"url":"https://github.com/radareorg/radare2/commit/c9de154cafd788d66535435e43ad6a54aed7ea2a"},{"source":"CNA: GitHub_M","tags":["x_refsource_MISC"],"url":"https://github.com/radareorg/radare2/releases/tag/6.2.2"},{"source":"security-advisories@github.com","tags":[],"url":"https://github.com/radareorg/radare2/commit/59899e6b8b18772ce9460b4caa2ced7f257fae76"},{"source":"security-advisories@github.com","tags":[],"url":"https://github.com/radareorg/radare2/commit/c9de154cafd788d66535435e43ad6a54aed7ea2a"},{"source":"security-advisories@github.com","tags":[],"url":"https://github.com/radareorg/radare2/issues/26600"},{"source":"security-advisories@github.com","tags":[],"url":"https://github.com/radareorg/radare2/releases/tag/6.2.2"},{"source":"security-advisories@github.com","tags":[],"url":"https://github.com/radareorg/radare2/security/advisories/GHSA-px7c-gwvj-73vf"}],"remediation":[],"revision":"1964b5247c6ae823be47b8e79d49e4c98ffc961599441abb97218d691f5f1acd","sources":[{"modifiedAt":1793831219079,"name":"CNA: GitHub_M","retrievedAt":1793833708675,"url":"https://www.cve.org/CVERecord?id=CVE-2026-108387"},{"modifiedAt":1793834238320,"name":"NVD","retrievedAt":1793838305605,"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108387"}],"ssvc":null,"status":"published","title":"radare2: Remote code execution when loading Pebble/SMD binary","updatedAt":1793838305605}