Lua Bytecode Parser Vulnerability in radare2 Framework

CVE-2026-81883

What is CVE-2026-81883?

The radare2 reverse engineering framework is susceptible to a buffer overflow vulnerability due to improper handling in the Lua 5.3 bytecode function parser. An attacker can exploit this vulnerability by crafting a Lua 5.3 bytecode file that causes the parser to read beyond the allocated input buffer. This can result in invalid parsing results or potential process crashes. It is important to update to version 6.2.0 or later to mitigate this risk.

References