CVE-2026-81881

radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's Mach-O Swift field-metadata parser was vulnerable because a relative Swift field pointer could be lower than the field-metadata section base, making subtraction produce a negative logical index. The vulnerability is triggered by parsing Swift type and class metadata from a crafted Mach-O file. The derived index was used to read four bytes immediately before the allocated field-metadata buffer. This can cause incorrect metadata processing or process termination; no attacker-observable memory disclosure has been demonstrated. This issue is fixed in version 6.2.0.

• CWE-125
• CWE-191

• https://github.com/radareorg/radare2/commit/1da6e782df220edf56138ef5fe4f33745b04db74Patch
• https://github.com/radareorg/radare2/issues/26229Exploit, Issue Tracking, Mitigation, Vendor Advisory
• https://github.com/radareorg/radare2/releases/tag/6.2.0Release Notes
• https://github.com/radareorg/radare2/security/advisories/GHSA-q4w7-225g-64j9Patch, Vendor Advisory

Published

Sep 22, 2026

Last Modified

Sep 25, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-81875HAPI FHIR is a complete implementation of the HL7 FHIR stand…7.5
• CVE-2026-81876HAPI FHIR is a complete implementation of the HL7 FHIR stand…7.5
• CVE-2026-81878radare2 is a UNIX-like reverse engineering framework and com…5.5
• CVE-2026-81879radare2 is a UNIX-like reverse engineering framework and com…6.1
• CVE-2026-8188A vulnerability has been found in Wavlink NU516U1 M16U1_V240…8.8
• CVE-2026-81880radare2 is a UNIX-like reverse engineering framework and com…5.5
• CVE-2026-81882radare2 is a UNIX-like reverse engineering framework and com…6.1
• CVE-2026-81883radare2 is a UNIX-like reverse engineering framework and com…3.3
• CVE-2026-81884radare2 is a UNIX-like reverse engineering framework and com…2.5
• CVE-2026-81885radare2 is a UNIX-like reverse engineering framework and com…5.5
• CVE-2026-81886radare2 is a UNIX-like reverse engineering framework and com…5.5
• CVE-2026-81887Livewire is a full-stack framework for Laravel. From 3.0.0-b…5.1