Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
5.5

radare2 may crash due to null pointer error

published 4 days ago
Summary

The radare2 tool can encounter a situation where it tries to use a missing piece of data, causing it to stop working unexpectedly. This can happen when processing certain Mach-O files, potentially interrupting analysis tasks. Update radare2 to the latest version or apply the provided patch to prevent the crash.

What to do
  • Update cleanstart radare2 to version 5.7.0-r0.
Affected software
Ecosystem VendorProductAffected versions
CleanStart cleanstart radare2 < 5.7.0-r0
Fix: upgrade to 5.7.0-r0
Original advisory text
Null pointer dereference in libr/bin/format/mach0/mach0
Security vulnerability affects the radare2 package. Null pointer dereference in libr/bin/format/mach0/mach0.
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit (estimated)
  • Gives an attacker partial control (estimated)
Severity
5.5 Medium
Timeline
Published31 Oct 2026
Updated31 Oct 2026
First seen31 Oct 2026
Sources
Track software like this
Free during beta