CVE-2024-11858

7.8 highEPSS 0.8%

High (7.8) in radare radare2. EPSS 0.8% chance of exploitation in the next 30 days.

A flaw was found in Radare2, which contains a command injection vulnerability caused by insufficient input validation when handling Pebble Application files. Maliciously crafted inputs can inject shell commands during command parsing, leading to unintended behavior during file processing

Severity

CVSS 3.1

7.8 high

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS: 0.8% chance of exploitation in the next 30 days; higher than 56% of CVEs (scores of 2026-10-31)
CWE: CWE-78
Published: 2024-12-15
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

radare:radare2

References

https://bugzilla.redhat.com/show_bug.cgi?id=2329102

Check your stack JSON