Radare2: Heap-buffer-overflow
Affects radare2Source GCVE Database
0
Severity
MediumRated by Threat Radar
Data as of 6 Nov 2026, 15:34 UTC
What to do
Affected software
| Product | Affected | Fixed in |
|---|---|---|
OSS-Fuzzradare2pkg:generic/radare2Other threats | Affected
| Fixed in– |
Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.
AI-suggested
Until an official fix is available, avoid processing untrusted inputs that might trigger the vulnerability.
Description
A heap-buffer-overflow vulnerability exists in the parse_classes_64 function of radare2, as reported by OSS-Fuzz. This issue causes a read overflow of 4 bytes on the heap during parsing operations. Multiple specific versions of radare2 are affected. No known exploits in the wild have been reported, and no official patch information is provided in the available data.
References
Community reviews
Loading reviews…