CVE-2026-81886radare2: Uncontrolled memory allocation in radare2 dmp64 parser
Updated under an hour ago ()
Does this affect you?
It affects radareorg radare2 and 1 other product. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's Windows 64-bit crash-dump dmp64 parser was vulnerable because the Windows dmp64 parser used an input-controlled physical-memory-run PageCount directly as the bound of a per-page allocation loop. The vulnerability is triggered by opening a small crafted full-memory Windows crash dump. The parser repeatedly allocated and appended page descriptors without validating the count against the dump size. This can cause denial of service through excessive memory consumption and processing time. This issue is fixed in version 6.2.0.
- CVSS
- 5.5 MEDIUM (v3.1, CNA)CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
- Weakness (CWE)
- CWE-770
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- GitHub_M
- NVD analysis
- Analyzed
- Record last updated
- Sep 22, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
radareorg radare2 radareorg:radare2 (from the name) | before 6.2.0 | CNA record |
radare radare2 radare:radare2 | before 6.2.0 | NVD |
References
- https://github.com/radareorg/radare2/security/advisories/GHSA-3xrx-wh64-8xr8x-refsource-confirm, patch, vendor-advisory
- https://github.com/radareorg/radare2/issues/26224x-refsource-misc, exploit, issue-tracking, mitigation, vendor-advisory
- https://github.com/radareorg/radare2/pull/26180x-refsource-misc, patch
- https://github.com/radareorg/radare2/commit/a7519fdb4da6835c2cecd8fe248e7dd1133cf17ax-refsource-misc, patch
- https://github.com/radareorg/radare2/releases/tag/6.2.0x-refsource-misc, release-notes
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.