Skip to main content
VulnerabilityPublished Updated

Radare2: Heap-buffer-overflow

Affects radare2Source GCVE Database

0
Severity
Medium

Rated by Threat Radar

Data as of 6 Nov 2026, 15:34 UTC

What to do

Affected software

ProductAffectedFixed in
OSS-Fuzzradare2pkg:generic/radare2Other threatsAffected
  • 5.6.8 – wip
  • >=2b77b277d67ce061ee6ef839e7139ebc2103c1e3
32 affected builds		Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

AI-suggested

Users should monitor radare2 official channels for patches addressing this heap-buffer-overflow vulnerability. Until a fix is available, cautious handling of untrusted inputs is advised.

Description

A heap-buffer-overflow vulnerability exists in the load_buffer function of radare2, as reported by OSS-Fuzz. This issue causes an out-of-bounds read of 8 bytes, potentially leading to memory corruption or crashes. Multiple specific versions of radare2 are affected. No CVSS score is available, and no known exploits in the wild have been reported.

References

Community reviews

Loading reviews…