Skip to content
OpenAdvisories
Medium · 5.5 CVE-2026-81886 EUVD-2026-84469

radare2: Uncontrolled memory allocation in radare2 dmp64 parser

Published Sep 22, 2026 · Updated Sep 22, 2026 · Assigned by GitHub_M

Description

radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's Windows 64-bit crash-dump dmp64 parser was vulnerable because the Windows dmp64 parser used an input-controlled physical-memory-run PageCount directly as the bound of a per-page allocation loop. The vulnerability is triggered by opening a small crafted full-memory Windows crash dump. The parser repeatedly allocated and appended page descriptors without validating the count against the dump size. This can cause denial of service through excessive memory consumption and processing time. This issue is fixed in version 6.2.0.

Affected products

VendorProductAffectedFixed
radareorg radare2 < 6.2.0 —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Ubuntu 26.10 radare2 No fix yet —
Ubuntu 26.04 LTS radare2 No fix yet —
Ubuntu 16.04 LTS radare2 No fix yet —
Show 3 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu Pro 24.04 LTS radare2 No fix yet —
Ubuntu Pro 20.04 LTS radare2 No fix yet —
Ubuntu Pro 18.04 LTS radare2 No fix yet —
ReleasePackageFixed inAdvisory
openSUSE Leap 16.0 radare2 6.2.2-bp160.1.1 openSUSE-SU-2026:21988-1

Advisories 1

References