CVE-2026-81879

Katalog CVE

CVSS 6.1 · Medium EPSS 0,18%

Kerentanan Out-of-bounds Read pada radare2. Skor CVSS 3.1 6.1 (Medium) menurut NVD.

Deskripsi (NVD)

radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's ELF PN_XNUM handling was vulnerable because the ELF parser allocated the program-header array using the resolved PN_XNUM count but several consumers still iterated with the original e_phnum value of 65535. The vulnerability is triggered by processing a crafted ELF file with e_phnum = 0xffff and a much smaller resolved count in shdr[0].sh_info. Consumers iterated beyond the allocated program-header array. This can cause a heap out-of-bounds read and process termination, resulting in denial of service; memory disclosure and code execution have not been demonstrated. This issue is fixed in version 6.2.0.

Rincian

Terbit di NVD

22 September 2026

Terakhir diubah

25 September 2026

Status NVD

Analyzed

CVSS 3.1

6.1 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-125: Out-of-bounds Read

EPSS (30 hari)

0,18% peluang dieksploitasi; lebih tinggi dari 7,2% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/radareorg/radare2/issues/26223 exploit · issue tracking · mitigasi · advisory vendor
• https://github.com/radareorg/radare2/security/advisories/GHSA-jqfq-hvcp-xh4p patch · advisory vendor
• https://github.com/radareorg/radare2/commit/9449b07579c19b6b187c1a0918fbec2cef1a036e patch
• https://github.com/radareorg/radare2/pull/26178 patch
• https://github.com/radareorg/radare2/releases/tag/6.2.0 release notes