radareorg radare2 up to 6.1.x NE relocation fixup-chain parser memory allocation

Summaryinfo

A vulnerability, which was classified as problematic, was found in radareorg radare2 up to 6.1.x. The affected element is an unknown function of the component NE relocation fixup-chain parser. The manipulation results in memory allocation. This vulnerability is known as CVE-2026-81885. Attacking locally is a requirement. No exploit is available. You should upgrade the affected component.

Detailsinfo

A vulnerability was found in radareorg radare2 up to 6.1.x. It has been classified as problematic. Affected is some unknown functionality of the component NE relocation fixup-chain parser. The manipulation with an unknown input leads to a memory allocation vulnerability. CWE is classifying the issue as CWE-789. The product allocates memory based on an untrusted, large size value, but it does not ensure that the size is within expected limits, allowing arbitrary amounts of memory to be allocated. This is going to have an impact on availability. CVE summarizes:

radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's NE relocation fixup-chain parser was vulnerable because the NE relocation parser followed fixup chains without an active iteration limit or cycle detection. The vulnerability is triggered by opening a crafted NE executable whose in-bounds relocation entry points back to itself instead of reaching 0xffff. The parser repeatedly processed the same relocation and allocated another relocation object on each iteration. This can cause denial of service through continuous CPU and memory consumption. This issue is fixed in version 6.2.0.

The advisory is shared for download at github.com. This vulnerability is traded as CVE-2026-81885 since 08/27/2026. The exploitability is told to be easy. The attack needs to be approached locally. Successful exploitation requires user interaction by the victim. There are neither technical details nor an exploit publicly available.

Upgrading to version 6.2.0 eliminates this vulnerability.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Productinfo

Type

• Programming Tool Software

Vendor

• radareorg

Name

• radare2

Version

• 6.0
• 6.1

License

• open-source

Website

• Product: https://github.com/radareorg/radare2/

CPE 2.3info

• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Discussion