CVE-2026-8695 – radare2 6.1.5 Use-After-Free via gdbr_threads_list()

​CVE ID :CVE-2026-8695

Published : May 15, 2026, 5:16 p.m. | 1 hour, 17 minutes ago

Description :radare2 6.1.5 contains a use-after-free vulnerability in the gdbr_threads_list() function that allows remote attackers to trigger memory corruption by sending a valid qfThreadInfo response followed by a malformed qsThreadInfo response. Attackers can exploit this vulnerability through GDB remote debugging to cause a denial of service or potentially achieve code execution by manipulating thread list processing.

Severity: 8.7 | HIGH

Visit the link for more details, such as CVSS details, affected products, timeline, and more… To Read More Visit Read More