CVE-2017-9762: The cmd_info function in libr/core/cmd_info.c in radare2 1.5.0 allows remote attackers to cause a denial of...

Security readout for executives and security teams

CVE-2017-9762 is a crash vulnerability in radare2 1.5.0. A specially crafted binary file can trigger a use-after-free in the cmd_info function, causing the application to stop. Business risk is disruption to malware-analysis, reverse-engineering, or automated file-inspection workflows that process untrusted binaries. Exposure is most likely where radare2 1.5.0 analyzes binaries supplied by users, customers, sandboxes, malware feeds, or automated pipelines. Normal environments without radare2, or without untrusted binary processing, are unlikely to be exposed based on the supplied evidence. Treat this as a targeted operational resilience issue, not a confirmed data breach risk. Prioritize remediation where radare2 is embedded in automated analysis or customer-facing file-processing systems, because crashes there can interrupt security operations or service availability. Mitigation focus: Inventory systems and pipelines using radare2 1.5.0.; Check radare2 vendor guidance and release notes for the corrected version.; Avoid processing untrusted binaries with affected radare2 until remediated..

Prepared

Jun 13, 2026, 04:43 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.