Hex-Rays IDA vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Hex-Rays IDA: 1 record(s), with affected versions and fixes.
CVE-2026-45181
Medium · 6.5
CWE-88 May 9, 2026
Argument Injection in Hex-Rays IDA
Hex-Rays IDA Pro 9.2 and 9.3 before 9.3sp2 does not block Clang dependency-file generation (via argument injection), which allows attackers to place their code into a plugins directory if the victim uses an attacker-supplied .i64 file.