CVE-2023-46570: Radare RADARE2

Critical severity, CVSS 9.8. EPSS: 0.9% chance of exploitation in the next 30 days.

An out-of-bounds read in radare2 v.5.8.9 and before exists in the print_insn32 function of libr/arch/p/nds32/nds32-dis.h.

Affected products

• Radare RADARE2: before 5.9.0 (fixed in 5.9.0)

Published 2023-10-28. Last modified 2026-06-17.