Is there a public PoC exploit available for EUVD-2026-41769?

Yes, a public proof-of-concept exploit is available for EUVD-2026-41769. Prioritise patching immediately. EPSS: 0.1%.

Is there a patch available for EUVD-2026-41769?

Yes, a patch is available for EUVD-2026-41769. Update the affected software to the latest version immediately.

radare2 EUVD-2026-41769

Q: What is the CVSS score of EUVD-2026-41769?

EUVD-2026-41769 has a CVSS 4.0 base score of 1.9 (Low). CVSS vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.1%.

| CVE-2026-14759 LOW

Heap-based Buffer Overflow (CWE-122)

2026-07-05 VulDB

GHSA-5c42-mjgc-pm69

Buffer Overflow Java Heap Overflow Radare2 Radareorg

1.9

CVSS 4.0 · Vendor: VulDB

Severity by source

Vendor (VulDB) PRIMARY

1.9 MEDIUM

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

vuln.today AI

3.3 LOW

Local-only attack via crafted file input requiring low OS privileges; impact is availability-only crash with no confidentiality or integrity effects confirmed.

3.1 AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

4.0 AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N

Primary rating from Vendor (VulDB).

CVSS VectorVendor: VulDB

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

Severity Changed

Jul 05, 2026 - 16:22 NVD

MEDIUM LOW

CVSS changed

Jul 05, 2026 - 16:22 NVD

4.8 (MEDIUM) 1.9 (LOW)

Analysis Generated

Jul 05, 2026 - 16:21 vuln.today

DescriptionCVE.org

A security flaw has been discovered in radareorg radare2 up to 6.1.6. This issue affects the function r_bin_java_inner_classes_attr_calc_size of the file shlr/java/class.c of the component RBinJava Line Number Table Parser. Performing a manipulation results in heap-based buffer overflow. The attack requires a local approach. The exploit has been released to the public and may be used for attacks. The patch is named cd62d15a6cbecdc67fd03f3ebdbbbeb741d18f87. To fix this issue, it is recommended to deploy a patch.

AnalysisAI

Heap-based buffer overflow in radare2's Java binary parser (all versions up to 6.1.6) allows a local, low-privileged attacker to crash the tool by supplying a crafted Java class file with a malformed Line Number Table attribute. The vulnerable function r_bin_java_inner_classes_attr_calc_size() in shlr/java/class.c miscalculates buffer sizes, resulting in a heap write beyond allocated bounds and a denial-of-service outcome. A public proof-of-concept exists via GitHub issue #26043; no active exploitation has been confirmed by CISA KEV, and impact is confined to availability with no confidentiality or integrity effects.

Technical ContextAI

radare2 is an open-source, cross-platform reverse engineering framework widely used by security analysts for binary analysis. The vulnerable component is the RBinJava subsystem responsible for parsing Java class file structures, specifically the handling of the Line Number Table attribute within inner class attribute blocks. The function r_bin_java_inner_classes_attr_calc_size() in shlr/java/class.c performs size calculations for this attribute but fails to validate input dimensions adequately before writing to heap memory. CWE-122 (Heap-based Buffer Overflow) identifies the root cause: a heap-allocated buffer is written beyond its allocated boundary, which in this context can corrupt adjacent heap metadata or data structures. The affected scope per CPE is cpe:2.3:a:radareorg:radare2:*:*:*:*:*:*:*:*, covering all versions through 6.1.6. The Java class file format's Line Number Table is a variable-length structure whose size is determined by attacker-controlled fields, making it a natural vector for arithmetic or bounds-checking failures.

RemediationAI

Apply the upstream patch commit cd62d15a6cbecdc67fd03f3ebdbbbeb741d18f87 directly from the radare2 GitHub repository at https://github.com/radareorg/radare2/commit/cd62d15a6cbecdc67fd03f3ebdbbbeb741d18f87. Users building from source should rebase to a commit at or after this fix. A tagged patched release version is not independently confirmed from available data - monitor the radare2 releases page at https://github.com/radareorg/radare2/ for an official release incorporating this fix. As a compensating control prior to patching, restrict radare2 usage to trusted Java class files only; avoid ingesting untrusted or third-party Java binaries through the tool until the fix is applied. For automated pipelines that invoke radare2 against user-supplied Java class files, disabling or sandboxing that pipeline effectively eliminates the attack surface, with the trade-off of reduced functionality for Java binary analysis workflows.