CVE-2026-81886
Received Received - Intake

Memory Exhaustion in radare2 DMP64 Parser

Publication date: 2026-09-22

Last updated on: 2026-09-22

Assigner: GitHub, Inc.

Description
radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's Windows 64-bit crash-dump dmp64 parser was vulnerable because the Windows dmp64 parser used an input-controlled physical-memory-run PageCount directly as the bound of a per-page allocation loop. The vulnerability is triggered by opening a small crafted full-memory Windows crash dump. The parser repeatedly allocated and appended page descriptors without validating the count against the dump size. This can cause denial of service through excessive memory consumption and processing time. This issue is fixed in version 6.2.0.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-22
Last Modified
2026-09-22
Generated
2026-09-22
AI Q&A
2026-09-22
EPSS Evaluated
N/A
NVD
CVE-2026-81886
EUVD
EUVD-2026-84469

Affected Vendors & Products

Showing 3 associated CPEs
Vendor Product Version / Range
radareorg radare2 to 6.1.8 (inc)
radareorg radare2 6.2.0
radare2 radare2 to 6.2.0 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-770 The product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is in radare2's Windows 64-bit crash-dump (dmp64) parser. It occurs when the parser uses an input-controlled PageCount value directly as the bound for a memory allocation loop without validating it against the actual dump file size. Opening a crafted small Windows crash dump with an extremely large PageCount causes radare2 to repeatedly allocate memory for each page, leading to excessive memory consumption and processing time, resulting in a denial of service.

Detection Guidance

To detect this vulnerability, check if your radare2 version is below 6.2.0. Run 'r2 -v' to see the installed version. If vulnerable, avoid opening untrusted Windows crash-dump files (.dmp) with radare2.

Impact Analysis

If you use radare2 to open a malicious Windows crash dump file, your system may experience high memory usage and become unresponsive or crash due to denial of service. This can disrupt your work and potentially affect other applications running on your system.

Mitigation Strategies

Upgrade radare2 to version 6.2.0 or later. Avoid opening untrusted Windows crash-dump files. If upgrading is not possible, limit system resources to reduce impact but note this is not a full mitigation.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-81886. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart