AIKIDO-2026-569363
radareorg.radare2 is vulnerable to Out-of-bounds Write
55
Medium Risk
This Affects:
radareorg.radare2TL;DR
Affected versions of this package contain a heap out-of-bounds write in the CPython bytecode marshal parser. The TYPE_ASCII and TYPE_ASCII_INTERNED readers accept a 32-bit externally controlled length, and a value of 0xffffffff wraps the size + 1 allocation to zero. The parser then fills the undersized buffer, causing a large out-of-bounds heap write and memory corruption when a crafted .pyc file is opened. The patch rejects unsafe sizes before allocating or reading data.
Who does this affect?
You are affected if you use an affected version of radare2 or rabin2 to open or inspect an untrusted CPython .pyc file. A crafted marshal TYPE_ASCII/TYPE_ASCII_INTERNED length triggers the out-of-bounds heap write locally.
Background info
radareorg.radare2 is vulnerable to Out-of-bounds Write in versions 4.5.0 - 6.1.8.
How to fix this
Upgrade the radareorg.radare2 library to the patch version.
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant