CVE-2026-81885

radare2 prior to 6.2.0 contains a denial-of-service vulnerability in its NE relocation fixup-chain parser . The parser followed fixup chains without an iteration limit or cycle detection, so a crafted NE executable containing an in-bounds relocation entry that points back to itself causes the par...

CVE-2026-31053

A double free vulnerability exists in librz/bin/format/le/le.c in the function leloadfixuprecord. When processing malformed or circular LE fixup chains, relocation entries may be freed multiple times during error handling. A specially crafted LE binary can trigger heap corruption and cause the...

CVE-2026-31053

The CVE-2026-31053 vulnerability affects librz, specifically the le_load_fixup_record() function in librz/bin/format/le/le.c. It is a double-free issue that can cause heap corruption when processing malformed or circular LE fixup chains, potentially leading to denial-of-service via a crash. The i...