CVE-2026-81880: CWE-400: Uncontrolled Resource Consumption in radareorg radare2
radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's Apple Preferred Executable Format loader was vulnerable because the PEF loader accepted relocSecCount values that were not bounded by the number of sections or complete relocation records in the input. The vulnerability is triggered by normal binary-format auto-detection of a small crafted Apple PEF file. The loader could perform up to 268,435,456 relocation-section iterations and repeated buffer operations after record offsets passed the end of the file. This can cause denial of service through excessive CPU consumption and prolonged processing. This issue is fixed in version 6.2.0.
AI Analysis
Technical Summary
radare2, a UNIX-like reverse engineering framework, had a vulnerability in its Apple PEF loader prior to version 6.2.0. The PEF loader accepted relocSecCount values without proper bounds checking against the number of sections or relocation records. When processing a crafted Apple PEF file, the loader could perform up to 268,435,456 relocation-section iterations and continue buffer operations beyond the file's end. This flaw causes excessive CPU consumption and prolonged processing, leading to denial of service. The vulnerability is fixed in radare2 version 6.2.0.
Potential Impact
An attacker can trigger a denial of service by causing radare2 to consume excessive CPU resources and take a prolonged time to process a crafted Apple PEF file. There is no impact on confidentiality or integrity, only availability is affected.
Mitigation Recommendations
This vulnerability is fixed in radare2 version 6.2.0. Users should upgrade to version 6.2.0 or later to remediate this issue. No additional mitigation steps are specified.
CVE-2026-81880: CWE-400: Uncontrolled Resource Consumption in radareorg radare2
Description
radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's Apple Preferred Executable Format loader was vulnerable because the PEF loader accepted relocSecCount values that were not bounded by the number of sections or complete relocation records in the input. The vulnerability is triggered by normal binary-format auto-detection of a small crafted Apple PEF file. The loader could perform up to 268,435,456 relocation-section iterations and repeated buffer operations after record offsets passed the end of the file. This can cause denial of service through excessive CPU consumption and prolonged processing. This issue is fixed in version 6.2.0.
CVSS v3.1
Score 5.5medium
Affected software
radareorg
radare2
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
radare2, a UNIX-like reverse engineering framework, had a vulnerability in its Apple PEF loader prior to version 6.2.0. The PEF loader accepted relocSecCount values without proper bounds checking against the number of sections or relocation records. When processing a crafted Apple PEF file, the loader could perform up to 268,435,456 relocation-section iterations and continue buffer operations beyond the file's end. This flaw causes excessive CPU consumption and prolonged processing, leading to denial of service. The vulnerability is fixed in radare2 version 6.2.0.
Potential Impact
An attacker can trigger a denial of service by causing radare2 to consume excessive CPU resources and take a prolonged time to process a crafted Apple PEF file. There is no impact on confidentiality or integrity, only availability is affected.
Mitigation Recommendations
This vulnerability is fixed in radare2 version 6.2.0. Users should upgrade to version 6.2.0 or later to remediate this issue. No additional mitigation steps are specified.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- GitHub_M
- Date Reserved
- 2026-08-27T17:48:42.122Z
- Cvss Version
- 3.1
- State
- PUBLISHED
Threat ID: 6ab29c3cf7a7c54106580d64
Added to database: 09/22/2026, 15:18:20 UTC
Last enriched: 09/22/2026, 15:33:03 UTC
Last updated: 09/23/2026, 01:58:07 UTC
Views: 14
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.