A flaw was found in radare2. The Apple Preferred Executable Format (PEF) loader in radare2 is vulnerable to uncontrolled resource consumption. A remote attacker could exploit this by providing a specially crafted Apple PEF file. The PEF loader accepts `relocSecCount` values that are not properly bounded, leading to an excessive number of relocation-section iterations and repeated buffer operations. This can cause excessive CPU consumption and prolonged processing, resulting in a denial of service.
Last checked: 2026-09-26 02:02 UTC
No exploitation evidence · CISA Coordinator (Assessed 2026-09-25 23:29 UTC)
Fix evidence last checked: 2026-09-23 11:19 UTC