CVE-2026-81881

Name of the Vulnerable Software and Affected Versions radare2 versions prior to 6.2.0

Description The Mach-O Swift field-metadata parser contains a flaw where a relative Swift field pointer can be lower than the field-metadata section base. This causes subtraction to produce a negative logical index when parsing Swift type and class metadata from a specially crafted Mach-O file. The resulting index is used to read four bytes immediately before the allocated field-metadata buffer, which may lead to incorrect metadata processing or process termination.

Recommendations Update to version 6.2.0.