Heap Memory Corruption in radare2 Command-Line Tool

CVE-2026-81878

What is CVE-2026-81878?

The radare2 reverse engineering framework is vulnerable due to its CPython bytecode parser, which fails to properly handle overly large 32-bit string lengths in .pyc files. When a specially crafted .pyc file is opened or inspected, it may trigger heap memory corruption. This occurs because the parser allows an overflow situation during allocation, leading to a potential denial of service. While arbitrary code execution could theoretically occur, it has not been demonstrated in practice. This issue was addressed in version 6.2.0 of radare2.

References