A flaw was found in radare2. The Windows 64-bit crash-dump (dmp64) parser in radare2 is vulnerable to uncontrolled memory allocation. A local user could exploit this by opening a specially crafted full-memory Windows crash dump, leading to the parser repeatedly allocating memory without proper validation. This can cause a denial of service (DoS) due to excessive memory consumption and processing time.
Last checked: 2026-09-28 15:29 UTC
No exploitation evidence · CISA Coordinator (Assessed 2026-09-22 17:33 UTC)
Exploit reference · [email protected] · View external evidence (Observed 2026-09-28 15:29 UTC)
Fix evidence last checked: 2026-09-23 11:19 UTC