CVE-2026-81885Published
radare2: Infinite relocation-chain loop causes denial of service in radare2 NE parser
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-81885 · Microsoft / collected KEV context
cve-program · CVE-2026-81885
- https://github.com/radareorg/radare2/security/advisories/GHSA-43wr-4j49-rcxj
- https://github.com/radareorg/radare2/issues/26225
- https://github.com/radareorg/radare2/pull/26192
- https://github.com/radareorg/radare2/commit/93d794caa7c2f08413106255d49546e544c1f9f0
- https://github.com/radareorg/radare2/releases/tag/6.2.0
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.