SB2026081545 - Multiple vulnerabilities in radare2

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB2026081545

SB2026081545 - Multiple vulnerabilities in radare2

Published: August 15, 2026

Security Bulletin ID SB2026081545
CSH Severity
Medium
Patch available
YES
Number of vulnerabilities 9
Exploitation vector Remote access
Highest impact Denial of service

Breakdown by Severity

Medium 56% Low 44%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 9 vulnerabilities.


1) Out-of-bounds read (CVE-ID: N/A)

CWE-ID: CWE-125 - Out-of-bounds read

CVSSv4: 4.6 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]


The vulnerability allows a remote attacker to cause a denial of service.

The vulnerability exists due to out-of-bounds read in the Mach-O Swift field metadata parser when parsing a crafted Swift Mach-O file. A remote attacker can trick the victim into opening a crafted file to cause a denial of service.

The vulnerable path is reached while parsing Swift type and class metadata, and user interaction is required to analyze the crafted file.


2) Integer overflow (CVE-ID: N/A)

CWE-ID: CWE-190 - Integer overflow

CVSSv4: 6.7 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]


The vulnerability allows a remote attacker to cause a denial of service.

The vulnerability exists due to integer overflow in the CPython bytecode (.pyc) marshal parser when parsing a specially crafted .pyc file. A remote attacker can provide a .pyc file with an attacker-controlled length value to cause a denial of service.

User interaction is required to open or inspect the crafted file, including with r2 or rabin2.


3) Excessive Iteration (CVE-ID: N/A)

CWE-ID: CWE-834 - Excessive Iteration

CVSSv4: 6.7 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]


The vulnerability allows a remote attacker to cause a denial of service.

The vulnerability exists due to excessive iteration in the Apple Preferred Executable Format (PEF) loader when parsing a crafted PEF file during file opening or inspection. A remote attacker can supply a specially crafted PEF file to cause a denial of service.

The issue is reachable through normal binary-format auto-detection, and user interaction is required to open or inspect the crafted file.


4) Out-of-bounds read (CVE-ID: N/A)

CWE-ID: CWE-125 - Out-of-bounds read

CVSSv4: 4.6 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]


The vulnerability allows a remote attacker to cause a denial of service.

The vulnerability exists due to out-of-bounds read in the Lua 5.3 bytecode function parser when parsing a crafted Lua 5.3 bytecode file. A remote attacker can trick the victim into opening or inspecting a crafted file to cause a denial of service.

No attacker-observable memory disclosure has been demonstrated.


5) Out-of-bounds read (CVE-ID: N/A)

CWE-ID: CWE-125 - Out-of-bounds read

CVSSv4: 4.6 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]


The vulnerability allows a remote attacker to disclose sensitive information.

The vulnerability exists due to out-of-bounds read in the binary property-list Unicode string parser when processing binary property-list data through the `pFB` or `pFBj` commands. A remote attacker can trick the victim into processing a crafted binary property-list file to disclose sensitive information.

Binary property lists are not parsed automatically when a file is opened, and user interaction is required to invoke the affected commands.


6) Out-of-bounds read (CVE-ID: N/A)

CWE-ID: CWE-125 - Out-of-bounds read

CVSSv4: 1.8 [CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]


The vulnerability allows a remote attacker to cause a denial of service.

The vulnerability exists due to out-of-bounds read in the Mach-O LC_DATA_IN_CODE parser when parsing a crafted Mach-O file with verbose binary parsing enabled. A remote attacker can trick the victim into opening a crafted file to cause a denial of service.

The vulnerable code path is only executed when bin.verbose is enabled, and user interaction is required to process the crafted file.


7) Infinite loop (CVE-ID: N/A)

CWE-ID: CWE-835 - Loop with Unreachable Exit Condition ('Infinite Loop')

CVSSv4: 6.7 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]


The vulnerability allows a remote attacker to cause a denial of service.

The vulnerability exists due to loop with unreachable exit condition in the NE relocation parser when parsing a crafted NE executable. A remote attacker can trick the victim into opening a crafted file to cause a denial of service.

User interaction is required to open the crafted file.


8) Allocation of Resources Without Limits or Throttling (CVE-ID: N/A)

CWE-ID: CWE-770 - Allocation of Resources Without Limits or Throttling

CVSSv4: 6.7 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]


The vulnerability allows a remote attacker to cause a denial of service.

The vulnerability exists due to allocation of resources without limits or throttling in the dmp64 parser when opening a crafted full-memory Windows dump. A remote attacker can create a crafted dump file with an extremely large PageCount value to cause a denial of service.

User interaction is required to open a crafted file.


9) Out-of-bounds read (CVE-ID: N/A)

CWE-ID: CWE-125 - Out-of-bounds read

CVSSv4: 6.7 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]


The vulnerability allows a remote attacker to cause a denial of service.

The vulnerability exists due to out-of-bounds read in the ELF parser when parsing a crafted ELF file using the PN_XNUM extended program-header count. A remote attacker can trick the victim into opening a crafted ELF file to cause a denial of service.

User interaction is required to open or inspect a crafted ELF file.


Remediation

Install update from vendor's website.

References