CVE-2026-81880

Name of the Vulnerable Software and Affected Versions radare2 versions prior to 6.2.0

Description The Apple Preferred Executable Format (PEF) loader fails to properly bound relocSecCount values against the number of sections or complete relocation records in the input. This issue is triggered during the automatic binary-format detection of a specially crafted Apple PEF file. Consequently, the loader may perform up to 268,435,456 relocation-section iterations and repeated buffer operations after record offsets exceed the end of the file, leading to a denial of service due to excessive CPU consumption and prolonged processing.

Recommendations Update to version 6.2.0.