CVE catalog

CVE-2024-29645

radare2-5.9.8-1.1 on GA media

Severity: Unknown
Published: Dec 9, 2024, 10:44:54 AM UTC
Updated: Feb 4, 2026, 2:58:51 AM UTC
Source: [NVD] · [CVE record]
EPSS: 0.24% · Oct 25, 2026

This update for radare2 fixes the following issues: Update to version 5.9.8: - CVE-2024-29645: buffer overflow vulnerability allows an attacker to execute arbitrary code via the parse_die function (boo#1234065). - For more details, check full release notes: https://github.com/radareorg/radare2/releases/tag/5.9.8 https://github.com/radareorg/radare2/releases/tag/5.9.6 https://github.com/radareorg/radare2/releases/tag/5.9.4 https://github.com/radareorg/radare2/releases/tag/5.9.2 https://github.com/radareorg/radare2/releases/tag/5.9.0 https://github.com/radareorg/radare2/releases/tag/5.8.8

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

Distribution	Package	Release	Version	Status
Suse	radare2	package hub 15 sp6	`5.9.8-bp156.4.3.1`	fixed
Opensuse	radare2	leap 15.6	`5.9.8-bp156.4.3.1`	fixed
Suse	radare2	package hub 15 sp5	`5.9.8-bp155.2.3.1`	fixed
Opensuse	radare2	leap 15.5	`5.9.8-bp155.2.3.1`	fixed
Opensuse	radare2	tumbleweed	`5.9.8-1.1`	fixed

Fixed-version evidence

Distribution	Package	Type	Release	Fixed version	Urgency	Origin	Bugs
Suse	radare2	rpm	package hub 15 sp6	`5.9.8-bp156.4.3.1`	Not reported	OPENSUSE-SU-2024:0397-1	Not reported
Opensuse	radare2	rpm	leap 15.6	`5.9.8-bp156.4.3.1`	Not reported	OPENSUSE-SU-2024:0397-1	Not reported
Suse	radare2	rpm	package hub 15 sp5	`5.9.8-bp155.2.3.1`	Not reported	OPENSUSE-SU-2024:0396-1	Not reported
Opensuse	radare2	rpm	leap 15.5	`5.9.8-bp155.2.3.1`	Not reported	OPENSUSE-SU-2024:0396-1	Not reported
Opensuse	radare2	rpm	tumbleweed	`5.9.8-1.1`	Not reported	OPENSUSE-SU-2024:14569-1	Not reported

OpenFactory catalog packages

[openSUSE Tumbleweed]

[libsdb2_5_0]Unknown
Source package: [radare2]
Details (1)
- 6.2.0-1.1 · x86_64 · tumbleweed
  Unknown · Fixed: 5.9.8-1.1
  Version impact unknown
  pypi · radare2 · opensuse · tumbleweed
[radare2-devel]Unknown
Source package: [radare2]
Details (1)
- 6.2.0-1.1 · x86_64 · tumbleweed
  Unknown · Fixed: 5.9.8-1.1
  Version impact unknown
  pypi · radare2 · opensuse · tumbleweed
[radare2-zsh-completion]Unknown
Source package: [radare2]
Details (1)
- 6.2.0-1.1 · noarch · tumbleweed
  Unknown · Fixed: 5.9.8-1.1
  Version impact unknown
  pypi · radare2 · opensuse · tumbleweed
[radare2]Fixed
Source package: [radare2]
Details (1)
- 6.2.0-1.1 · x86_64 · tumbleweed
  Fixed · Fixed: 5.9.8-1.1
  pypi · radare2 · opensuse · tumbleweed

Observed: Oct 27, 2026, 12:32:39 AM UTC

References

[FIRST EPSS] · [OSV Package Vulnerability Database] · [SUSE security advisories and VEX]