CVE-2026-81881 radare2: Heap out-of-bounds read in radare2 Mach-O Swift metadata parser

radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's Mach-O Swift field-metadata parser was vulnerable because a relative Swift field pointer could be lower than the field-metadata section base, making subtraction produce a negative logical inde...

CVE-2026-81881

radare2 (a UNIX-like reverse engineering framework) is affected by a heap out-of-bounds read in its Mach-O Swift field-metadata parser prior to version 6.2.0 . A relative Swift field pointer that is lower than the field-metadata section base causes a negative logical index, which reads four bytes...