VulnerabilityPublished 5 Nov 2022Updated 6 Nov 2026

Radare2: Heap-buffer-overflow

Affects radare2Source GCVE Database

Severity

Medium

Rated by Threat Radar

Data as of 6 Nov 2026, 15:34 UTC

What to do

Affected software

Product	Affected	Fixed in
OSS-Fuzzradare2`pkg:generic/radare2`Other threats	Affected 5.8.0 – 6.2.6 >=0f2952ea080596fc51f484aca4cdc7efb59af59d 25 affected builds	Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

Description

A heap-buffer-overflow vulnerability exists in the io_memory_read function of radare2, as reported by OSS-Fuzz. This issue causes a write overflow on the heap during memory read operations. Multiple specific versions of radare2 are affected. No CVSS score is provided, and no known exploits in the wild have been reported.

Impact

The heap-buffer-overflow can lead to memory corruption, potentially causing crashes or undefined behavior in radare2. There is no information about active exploitation or impact beyond the crash condition.

Summary

The vulnerability is a heap-buffer-overflow write detected in the io_memory_read function within radare2. The issue was identified through OSS-Fuzz testing and results in a crash state involving io_memory_read, r_io_plugin_read, and r_io_desc_read functions. The affected versions include multiple discrete releases from 5.8.0 through 6.2.0 and a specific commit identified by its hash. No further technical details or exploitation methods are provided.

References

bugs.chromium.org/p/oss-fuzz/issues/detail?id=53019 (opens in a new tab)

Community reviews

Loading reviews…

What to do

Affected software

Description

AI analysisMachine-generated, updated 7 Sep 2026, 17:04 UTC

Technical details

References

Community reviews

Related threats