AIKIDO-2026-10448
radareorg.radare2 is vulnerable to Out-of-bounds Read
68
Medium Risk
This Affects:
radareorg.radare2TL;DR
Affected versions of this package contain an out-of-bounds memory access the regex engine. Missing validation of offsets and lengths allows crafted binaries to trigger invalid pointer arithmetic and read or write outside allocated buffers during comparisons. This can result in memory corruption or a crash when radareorg.radare2 processes malicious input files. The patch adds boundary checks and null validations before using computed ranges.
Who does this affect?
You are affected if you are using a version that falls within the vulnerable range.
Background info
radareorg.radare2 is vulnerable to Out-of-bounds Read in versions 1.3.0 - 6.1.1.
How to fix this
Upgrade the radareorg.radare2 library to the patch version.
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
SOC 2Compliant
ISO 27001Compliant