UNIX-like reverse engineering framework
Command-line reverse engineering framework with a disassembler, debugger, hex editor and scripting for many architectures and file formats.
radare2 is a set of libraries and command-line tools for analysing binaries: disassembly, debugging, binary patching, searching and data carving across many architectures and formats. Its interactive shell is dense but powerful, and r2pipe lets scripts in many languages drive it.
Graphical front ends (such as Iaito) and a plugin manager (r2pm) extend it.
LGPL-3.0-only · GNU LGPL v3 (most of the code) · Open source
Most of radare2 is LGPL v3; some plugins and dependencies carry other licences (including GPL), as described in COPYING.md.
Checked by ThreatWire against the repository's licence file on 2026-10-20. GitHub detects: NOASSERTION.
11 published advisories for radare2 in GitHub repository advisories. Keep the tool updated: security tools often run with broad access.
GHSA-px7c-gwvj-73vfCVE-2026-108387high2026-09-03
Remote code execution when loading Pebble/SMD binary
GHSA-fg6f-rj8g-25pqCVE-2026-81880medium2026-08-14
Uncontrolled resource consumption in radare2 PEF loader
GHSA-96m5-hvwp-674cCVE-2026-81883low2026-08-14
Out-of-bounds Read at the end of string in the LUA 5.3 bytecode
GHSA-r5cr-f9p6-5pvjCVE-2026-81882low2026-08-14
Missing string termination causes heap out-of-bounds read in radare2 bplist parser
GHSA-c2g2-2mc7-3x5wCVE-2026-81884low2026-08-14
Heap out-of-bounds read in radare2 Mach-O LC_DATA_IN_CODE parser
GHSA-43wr-4j49-rcxjCVE-2026-81885medium2026-08-14
Infinite relocation-chain loop causes denial of service in radare2 NE parser
GHSA-3xrx-wh64-8xr8CVE-2026-81886medium2026-08-14
Uncontrolled memory allocation in radare2 dmp64 parser
GHSA-jqfq-hvcp-xh4pCVE-2026-81879medium2026-08-14
Heap out-of-bounds read in radare2 ELF PN_XNUM handling
GHSA-q4w7-225g-64j9CVE-2026-81881low2026-08-11
Heap out-of-bounds read in radare2 Mach-O Swift metadata parser
GHSA-9phv-v2w8-56j3CVE-2026-81878medium2026-08-11
Integer overflow causes heap out-of-bounds write in radare2 PYC parser
GHSA-r552-vp94-9358CVE-2020-15121high2020-07-20
Command injection during opening PE file with malformed debug symbol information (PDB) - `idpd` command
Sources: GitHub repository advisories · checked 2026-10-20.
Software reverse engineering framework from the NSA
Reverse engineering suite released by the NSA with disassembly, decompilation, graphing and scripting for many processor architectures.
Pattern matching for malware research
Tool and rule language from VirusTotal to identify and classify malware samples using textual and binary patterns plus conditions.
Memory forensics framework
Framework for extracting digital artefacts from memory images (RAM dumps) of Windows, Linux and macOS systems, rewritten in Python 3.
Reverse engineering tool for Android APK files
Decodes Android APK resources and code to a near-original form (smali) and rebuilds them after modification, for analysis and testing.
Query your endpoints with SQL
Exposes the operating system as a relational database so processes, users, packages and configuration can be queried with SQL on Linux, macOS and Windows.
Dynamic instrumentation toolkit
Injects a JavaScript engine into running processes on Windows, macOS, Linux, iOS and Android to trace, hook and modify functions at runtime.
