CVE-2026-81880— radare2: Uncontrolled resource consumption in radare2 PEF loader
一分钟漏洞结论
影响对象
radareorg radare2
利用判断
尚无明确在野利用证据，仍需结合暴露面评估
建议动作
优先检查厂商安全公告和参考链接中的修复版本；无法立即升级时，限制受影响服务暴露并加强监测。
radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's Apple Preferred Executable Format loader was vulnerable because the PEF loader accepted relocSecCount values that were not bounded by the number of section
获取后续新漏洞提醒
登录后订阅
一、 漏洞 CVE-2026-81880 基础信息
漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
radare2: Uncontrolled resource consumption in radare2 PEF loader
来源: CVE Program / CVE List V5
Vulnerability Description
radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's Apple Preferred Executable Format loader was vulnerable because the PEF loader accepted relocSecCount values that were not bounded by the number of sections or complete relocation records in the input. The vulnerability is triggered by normal binary-format auto-detection of a small crafted Apple PEF file. The loader could perform up to 268,435,456 relocation-section iterations and repeated buffer operations after record offsets passed the end of the file. This can cause denial of service through excessive CPU consumption and prolonged processing. This issue is fixed in version 6.2.0.
来源: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
来源: CVE Program / CVE List V5
Vulnerability Type
未加控制的资源消耗(资源穷尽)
来源: CVE Program / CVE List V5
受影响产品
二、漏洞 CVE-2026-81880 的公开POC
| # | POC 描述 | 源链接 | 神龙链接 |
|---|
AI 生成 POC
高级
未找到公开 POC。
登录以生成 AI POC三、漏洞 CVE-2026-81880 的情报信息
请登录查看更多情报信息。
CVE-2026-81880 补丁与修复 (1)
CVE-2026-81880 其他参考 (2)
-
Release 6.2.0 · radareorg/radare2 · GitHub x_refsource_MISC
同批安全公告 · radareorg · 2026-09-22 · 共 9 条
| CVE-2026-81885 | 5.5 MEDIUM | radare2: Infinite relocation-chain loop causes denial of service in radare2 NE parser |
| CVE-2026-81879 | 5.5 MEDIUM | radare2: Heap out-of-bounds read in radare2 ELF PN_XNUM handling |
| CVE-2026-81878 | 5.5 MEDIUM | radare2: Integer overflow causes heap out-of-bounds write in radare2 PYC parser |
| CVE-2026-81886 | 5.5 MEDIUM | radare2: Uncontrolled memory allocation in radare2 dmp64 parser |
| CVE-2026-81882 | 3.3 LOW | radare2: Missing string termination causes heap out-of-bounds read in radare2 bplist parse |
| CVE-2026-81881 | 3.3 LOW | radare2: Heap out-of-bounds read in radare2 Mach-O Swift metadata parser |
| CVE-2026-81883 | 3.3 LOW | radare2: Out-of-bounds Read at the end of string in the LUA 5.3 bytecode |
| CVE-2026-81884 | 2.5 LOW | radare2: Heap out-of-bounds read in radare2 Mach-O LC_DATA_IN_CODE parser |
IV. Related Vulnerabilities
Same product: radare2
-
CVE-2026-81883
radare2: Out-of-bounds Read at the end of string in the LUA -
CVE-2026-81885
radare2: Infinite relocation-chain loop causes denial of ser -
CVE-2026-81882
radare2: Missing string termination causes heap out-of-bound -
CVE-2026-81886
radare2: Uncontrolled memory allocation in radare2 dmp64 par -
CVE-2026-81884
radare2: Heap out-of-bounds read in radare2 Mach-O LC_DATA_I
Same vendor: radareorg
-
CVE-2026-81883
radare2: Out-of-bounds Read at the end of string in the LUA -
CVE-2026-81885
radare2: Infinite relocation-chain loop causes denial of ser -
CVE-2026-81882
radare2: Missing string termination causes heap out-of-bound -
CVE-2026-81886
radare2: Uncontrolled memory allocation in radare2 dmp64 par -
CVE-2026-81884
radare2: Heap out-of-bounds read in radare2 Mach-O LC_DATA_I
Same weakness: CWE-400
V. Comments for CVE-2026-81880
暂无评论