Release 6.2.0 · radareorg/radare2 · GitHub

BlackTree keeps a versioned source snapshot and links it to relevant CVE reports. The publisher remains authoritative for product applicability, release details and installation guidance.

Read the official article ↗

Publishergithub.com

Article IDNo stable ID in source URL

Verified snapshot26 Sept 2026, 14:36 UTC

Linked CVEs9

Linked CVE reports

These are source relationships, not a claim that this article fixes every affected product or branch.

CVE-2026-81882radare2: Missing string termination causes heap out-of-bounds read in radare2 bplist parser
CVE-2026-81885radare2: Infinite relocation-chain loop causes denial of service in radare2 NE parser
CVE-2026-81880radare2: Uncontrolled resource consumption in radare2 PEF loader
CVE-2026-81878radare2: Integer overflow causes heap out-of-bounds write in radare2 PYC parser
CVE-2026-81881radare2: Heap out-of-bounds read in radare2 Mach-O Swift metadata parser
CVE-2026-81886radare2: Uncontrolled memory allocation in radare2 dmp64 parser
CVE-2026-81883radare2: Out-of-bounds Read at the end of string in the LUA 5.3 bytecode
CVE-2026-81884radare2: Heap out-of-bounds read in radare2 Mach-O LC_DATA_IN_CODE parser
CVE-2026-81879radare2: Heap out-of-bounds read in radare2 ELF PN_XNUM handling

Source and provenance

Original title: Release 6.2.0 · radareorg/radare2 · GitHub. Captured 26 Sept 2026, 14:36 UTC. The stored article is used for enrichment and change detection; BlackTree does not republish the publisher's full text here.

Open the publisher's current version ↗