Beveiligingsadvies

CVE-2026-8695

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-05-15 17:01:36
Laatst bijgewerkt 2026-07-14 22:04:00
Toegewezen door VulnCheck
CVSS-score 8.7
Status PUBLISHED

Beschrijving

radare2 6.1.5 contains a use-after-free vulnerability in the gdbr_threads_list() function that allows remote attackers to trigger memory corruption by sending a valid qfThreadInfo response followed by a malformed qsThreadInfo response. Attackers can exploit this vulnerability through GDB remote debugging to cause a denial of service or potentially achieve code execution by manipulating thread list processing.