CVE-2026-81878

Name of the Vulnerable Software and Affected Versions radare2 versions prior to 6.2.0

Description The CPython bytecode .pyc marshal parser in radare2 contains a flaw where marshal readers accept a 32-bit string length without validating if the value overflows the size-plus-one allocation. When opening or inspecting a specially crafted .pyc file using r2 or rabin2, a length of 0xffffffff can cause the allocation to wrap to zero. This allows the byte reader to write attacker-controlled data and fill bytes beyond the heap allocation, leading to heap memory corruption and denial of service. Arbitrary code execution is potentially possible.

Recommendations Update to version 6.2.0.