CVE Intelligence

Hex-Rays vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Hex-Rays products: 1 record(s), with severity, exploitation and fixes.

IDA 1

Exploited only (KEV) →

CVE-2026-45181 Medium · 6.5 CWE-88 May 9, 2026
Argument Injection in Hex-Rays IDA
Hex-Rays IDA Pro 9.2 and 9.3 before 9.3sp2 does not block Clang dependency-file generation (via argument injection), which allows attackers to place their code into a plugins directory if the victim uses an attacker-supplied .i64 file.