CVE-2026-81886

MEDIUM 5.5

radare2: Uncontrolled memory allocation in radare2 dmp64 parser

CVSS Score

5.5

EPSS Score

0.0%

EPSS Percentile

0th

radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's Windows 64-bit crash-dump dmp64 parser was vulnerable because the Windows dmp64 parser used an input-controlled physical-memory-run PageCount directly as the bound of a per-page allocation loop. The vulnerability is triggered by opening a small crafted full-memory Windows crash dump. The parser repeatedly allocated and appended page descriptors without validating the count against the dump size. This can cause denial of service through excessive memory consumption and processing time. This issue is fixed in version 6.2.0.

CWE	CWE-770
Vendor	radareorg
Product	radare2
Published	Sep 22, 2026

Stay Ahead of the Next One

Get instant alerts for radareorg radare2

Be the first to know when new medium vulnerabilities affecting radareorg radare2 are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Attack Vector

Local

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Affected Versions

radareorg / radare2

< 6.2.0

References

NVD ↗ CVE.org ↗ EPSS Data ↗

github.com: https://github.com/radareorg/radare2/security/advisories/GHSA-3xrx-wh64-8xr8 github.com: https://github.com/radareorg/radare2/issues/26224 github.com: https://github.com/radareorg/radare2/pull/26180 github.com: https://github.com/radareorg/radare2/commit/a7519fdb4da6835c2cecd8fe248e7dd1133cf17a github.com: https://github.com/radareorg/radare2/releases/tag/6.2.0