CVE-2026-4174

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-4174", "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "state": "PUBLISHED", "assignerShortName": "VulDB", "dateReserved": "2026-03-14T15:08:42.451Z", "datePublished": "2026-03-15T10:32:10.553Z", "dateUpdated": "2026-03-17T15:14:43.360Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "shortName": "VulDB", "dateUpdated": "2026-03-15T10:32:10.553Z"}, "title": "Radare2 Mach-O File mach0.c walk_exports_trie resource consumption", "problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-400", "lang": "en", "description": "Resource Consumption"}]}, {"descriptions": [{"type": "CWE", "cweId": "CWE-404", "lang": "en", "description": "Denial of Service"}]}], "affected": [{"vendor": "n/a", "product": "Radare2", "versions": [{"version": "5.9.9", "status": "affected"}, {"version": "6.1.2", "status": "unaffected"}], "modules": ["Mach-O File Parser"]}], "descriptions": [{"lang": "en", "value": "A vulnerability has been found in Radare2 5.9.9. This issue affects the function walk_exports_trie of the file libr/bin/format/mach0/mach0.c of the component Mach-O File Parser. Such manipulation leads to resource consumption. The attack can only be performed from a local environment. The exploit has been disclosed to the public and may be used. The existence of this vulnerability is still disputed at present. Upgrading to version 6.1.2 is capable of addressing this issue. The name of the patch is 4371ae84c99c46b48cb21badbbef06b30757aba0. You should upgrade the affected component. The code maintainer states that, \"[he] wont consider this bug a DoS\"."}], "metrics": [{"cvssV4_0": {"version": "4.0", "baseScore": 4.8, "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P", "baseSeverity": "MEDIUM"}}, {"cvssV3_1": {"version": "3.1", "baseScore": 3.3, "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C", "baseSeverity": "LOW"}}, {"cvssV3_0": {"version": "3.0", "baseScore": 3.3, "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C", "baseSeverity": "LOW"}}, {"cvssV2_0": {"version": "2.0", "baseScore": 1.7, "vectorString": "AV:L/AC:L/Au:S/C:N/I:N/A:P/E:POC/RL:OF/RC:C"}}], "timeline": [{"time": "2026-03-14T00:00:00.000Z", "lang": "en", "value": "Advisory disclosed"}, {"time": "2026-03-14T01:00:00.000Z", "lang": "en", "value": "VulDB entry created"}, {"time": "2026-03-14T16:13:59.000Z", "lang": "en", "value": "VulDB entry last update"}], "credits": [{"lang": "en", "value": "breakingbad (VulDB User)", "type": "reporter"}], "references": [{"url": "https://vuldb.com/?id.351081", "name": "VDB-351081 | Radare2 Mach-O File mach0.c walk_exports_trie resource consumption", "tags": ["vdb-entry", "technical-description"]}, {"url": "https://vuldb.com/?ctiid.351081", "name": "VDB-351081 | CTI Indicators (IOB, IOC, IOA)", "tags": ["signature", "permissions-required"]}, {"url": "https://vuldb.com/?submit.769799", "name": "Submit #769799 | radareorg Radare2 5.9.9 Denial of Service", "tags": ["third-party-advisory"]}, {"url": "https://github.com/radareorg/radare2/issues/25482", "tags": ["issue-tracking"]}, {"url": "https://github.com/user-attachments/files/25620145/gen_macho_poc.py", "tags": ["exploit"]}, {"url": "https://github.com/ToddAWalter/radare2/commit/4371ae84c99c46b48cb21badbbef06b30757aba0", "tags": ["patch"]}, {"url": "https://github.com/radareorg/radare2/milestone/94", "tags": ["patch"]}], "tags": ["disputed", "x_open-source"]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-03-17T15:14:32.319752Z", "id": "CVE-2026-4174", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-03-17T15:14:43.360Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-4174", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-03-17T15:14:32.319752Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-03-17T15:14:38.343Z"}}], "cna": {"tags": ["disputed", "x_open-source"], "title": "Radare2 Mach-O File mach0.c walk_exports_trie resource consumption", "credits": [{"lang": "en", "type": "reporter", "value": "breakingbad (VulDB User)"}], "metrics": [{"cvssV4_0": {"version": "4.0", "baseScore": 4.8, "baseSeverity": "MEDIUM", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P"}}, {"cvssV3_1": {"version": "3.1", "baseScore": 3.3, "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C"}}, {"cvssV3_0": {"version": "3.0", "baseScore": 3.3, "baseSeverity": "LOW", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C"}}, {"cvssV2_0": {"version": "2.0", "baseScore": 1.7, "vectorString": "AV:L/AC:L/Au:S/C:N/I:N/A:P/E:POC/RL:OF/RC:C"}}], "affected": [{"vendor": "n/a", "modules": ["Mach-O File Parser"], "product": "Radare2", "versions": [{"status": "affected", "version": "5.9.9"}, {"status": "unaffected", "version": "6.1.2"}]}], "timeline": [{"lang": "en", "time": "2026-03-14T00:00:00.000Z", "value": "Advisory disclosed"}, {"lang": "en", "time": "2026-03-14T01:00:00.000Z", "value": "VulDB entry created"}, {"lang": "en", "time": "2026-03-14T16:13:59.000Z", "value": "VulDB entry last update"}], "references": [{"url": "https://vuldb.com/?id.351081", "name": "VDB-351081 | Radare2 Mach-O File mach0.c walk_exports_trie resource consumption", "tags": ["vdb-entry", "technical-description"]}, {"url": "https://vuldb.com/?ctiid.351081", "name": "VDB-351081 | CTI Indicators (IOB, IOC, IOA)", "tags": ["signature", "permissions-required"]}, {"url": "https://vuldb.com/?submit.769799", "name": "Submit #769799 | radareorg Radare2 5.9.9 Denial of Service", "tags": ["third-party-advisory"]}, {"url": "https://github.com/radareorg/radare2/issues/25482", "tags": ["issue-tracking"]}, {"url": "https://github.com/user-attachments/files/25620145/gen_macho_poc.py", "tags": ["exploit"]}, {"url": "https://github.com/ToddAWalter/radare2/commit/4371ae84c99c46b48cb21badbbef06b30757aba0", "tags": ["patch"]}, {"url": "https://github.com/radareorg/radare2/milestone/94", "tags": ["patch"]}], "descriptions": [{"lang": "en", "value": "A vulnerability has been found in Radare2 5.9.9. This issue affects the function walk_exports_trie of the file libr/bin/format/mach0/mach0.c of the component Mach-O File Parser. Such manipulation leads to resource consumption. The attack can only be performed from a local environment. The exploit has been disclosed to the public and may be used. The existence of this vulnerability is still disputed at present. Upgrading to version 6.1.2 is capable of addressing this issue. The name of the patch is 4371ae84c99c46b48cb21badbbef06b30757aba0. You should upgrade the affected component. The code maintainer states that, \"[he] wont consider this bug a DoS\"."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-400", "description": "Resource Consumption"}]}, {"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-404", "description": "Denial of Service"}]}], "providerMetadata": {"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "shortName": "VulDB", "dateUpdated": "2026-03-15T10:32:10.553Z"}}}, "cveMetadata": {"cveId": "CVE-2026-4174", "state": "PUBLISHED", "dateUpdated": "2026-03-17T15:14:43.360Z", "dateReserved": "2026-03-14T15:08:42.451Z", "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "datePublished": "2026-03-15T10:32:10.553Z", "assignerShortName": "VulDB"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"modules": ["Mach-O File Parser"], "product": "Radare2", "vendor": "n/a", "versions": [{"status": "affected", "version": "5.9.9"}, {"status": "unaffected", "version": "6.1.2"}]}], "source": "cna@vuldb.com"}], "cveTags": [{"sourceIdentifier": "cna@vuldb.com", "tags": ["disputed"]}], "descriptions": [{"lang": "en", "value": "A vulnerability has been found in Radare2 5.9.9. This issue affects the function walk_exports_trie of the file libr/bin/format/mach0/mach0.c of the component Mach-O File Parser. Such manipulation leads to resource consumption. The attack can only be performed from a local environment. The exploit has been disclosed to the public and may be used. The existence of this vulnerability is still disputed at present. Upgrading to version 6.1.2 is capable of addressing this issue. The name of the patch is 4371ae84c99c46b48cb21badbbef06b30757aba0. You should upgrade the affected component. The code maintainer states that, \"[he] wont consider this bug a DoS\"."}, {"lang": "es", "value": "Se ha encontrado una vulnerabilidad en Radare2 5.9.9. Este problema afecta a la funci\u00f3n walk_exports_trie del archivo libr/bin/format/mach0/mach0.c del componente Mach-O File Parser. Dicha manipulaci\u00f3n conduce al consumo de recursos. El ataque solo puede realizarse desde un entorno local. El exploit ha sido divulgado al p\u00fablico y puede ser utilizado. La existencia de esta vulnerabilidad a\u00fan est\u00e1 en disputa actualmente. La actualizaci\u00f3n a la versi\u00f3n 6.1.2 es capaz de abordar este problema. El nombre del parche es 4371ae84c99c46b48cb21badbbef06b30757aba0. Deber\u00eda actualizar el componente afectado. El mantenedor del c\u00f3digo afirma que, 'no considerar\u00e1 este error un DoS'."}], "id": "CVE-2026-4174", "lastModified": "2026-06-17T10:56:06.930", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "LOW", "cvssData": {"accessComplexity": "LOW", "accessVector": "LOCAL", "authentication": "SINGLE", "availabilityImpact": "PARTIAL", "baseScore": 1.7, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:L/AC:L/Au:S/C:N/I:N/A:P", "version": "2.0"}, "exploitabilityScore": 3.1, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "cna@vuldb.com", "type": "Secondary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "LOW", "baseScore": 3.3, "baseSeverity": "LOW", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 1.4, "source": "cna@vuldb.com", "type": "Secondary"}], "cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "LOCAL", "availabilityRequirement": "NOT_DEFINED", "baseScore": 1.9, "baseSeverity": "LOW", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "PROOF_OF_CONCEPT", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "LOW", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "LOW", "vulnConfidentialityImpact": "NONE", "vulnIntegrityImpact": "NONE", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "cna@vuldb.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-4174", "options": [{"exploitation": "poc"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-03-17T15:14:32.319752Z", "version": "2.0.3"}}]}, "published": "2026-03-16T14:19:57.890", "references": [{"source": "cna@vuldb.com", "url": "https://github.com/ToddAWalter/radare2/commit/4371ae84c99c46b48cb21badbbef06b30757aba0"}, {"source": "cna@vuldb.com", "url": "https://github.com/radareorg/radare2/issues/25482"}, {"source": "cna@vuldb.com", "url": "https://github.com/radareorg/radare2/milestone/94"}, {"source": "cna@vuldb.com", "url": "https://github.com/user-attachments/files/25620145/gen_macho_poc.py"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/?ctiid.351081"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/?id.351081"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/?submit.769799"}], "sourceIdentifier": "cna@vuldb.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-400"}, {"lang": "en", "value": "CWE-404"}], "source": "cna@vuldb.com", "type": "Secondary"}]}

{"bugzilla": {"description": "Radare2: Radare2: Local resource consumption via Mach-O File Parser", "id": "2447696", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2447696"}, "csaw": false, "cvss3": {"cvss3_base_score": "3.3", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L", "status": "draft"}, "cwe": "CWE-1050", "details": ["A flaw was found in Radare2. A local attacker could exploit a vulnerability in the Mach-O File Parser component, specifically within the `walk_exports_trie` function. By manipulating this component, an attacker can cause excessive resource consumption, potentially leading to a Denial of Service (DoS). An exploit for this issue has been publicly disclosed."], "mitigation": {"lang": "en:us", "value": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."}, "name": "CVE-2026-4174", "public_date": "2026-03-15T10:32:10Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-4174\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-4174\nhttps://github.com/ToddAWalter/radare2/commit/4371ae84c99c46b48cb21badbbef06b30757aba0\nhttps://github.com/radareorg/radare2/issues/25482\nhttps://github.com/radareorg/radare2/milestone/94\nhttps://github.com/user-attachments/files/25620145/gen_macho_poc.py\nhttps://vuldb.com/?ctiid.351081\nhttps://vuldb.com/?id.351081\nhttps://vuldb.com/?submit.769799"], "statement": "This MODERATE impact vulnerability in Radare2 allows a local attacker to cause resource consumption by manipulating Mach-O files. The flaw affects the `walk_exports_trie` function within the Mach-O File Parser component. Exploitation requires local access to the system.", "threat_severity": "Moderate"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "5.9.9"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "6.1.2"}}], "enrichment": {"confidence": 90.0, "confidence_source": "matching", "scores": [{"score": 95.0, "source": "inferred"}, {"score": 90.0, "source": "matching"}]}, "original": {"product": "Radare2", "source": "cna", "vendor": "n/a"}, "product": "radare2", "vendor": "radare"}], "analysis": {"en": {"generated_at": "2026-03-17T01:24:07.594769+00:00", "value": {"mitigation_remediation": ["Apply patch commit 4371ae84c99c46b48cb21badbbef06b30757aba0", "Upgrade Radare2 to version 6.1.2 or later"], "summary": {"action": "Patch", "impact": "Denial of Service"}, "threat_synthesis": {"affected_systems": "Affected systems are installations of Radare2, specifically version 5.9.9 and any earlier releases that have not applied the bug fix. The fix is available in Radare2 6.1.2 and is identified by commit 4371ae84c99c46b48cb21badbbef06b30757aba0.", "description_and_impact": "The vulnerability resides in the walk_exports_trie function of Radare2's Mach\u2011O file parser (libr/bin/format/mach0/mach0.c). An attacker can craft a Mach\u2011O binary that, when parsed, causes the function to consume excessive memory or CPU resources, leading to a denial\u2011of\u2011service condition. This weakness aligns with CWE\u20111050 (Untrusted Resource Consumption), CWE\u2011400 (Resource Exhaustion), and CWE\u2011404 (Improper Resource Shutdown or Release).", "risk_and_exploitability": "The CVSS score is 4.8, indicating moderate severity, while the EPSS score is below 1\u202f%, suggesting a low probability of exploitation in the wild. The vulnerability is not listed in the CISA Known Exploited Vulnerabilities catalog. Exploitation requires local access to the Radare2 environment; an attacker must provide a malicious Mach\u2011O file to the vulnerable parser. Because the attack is local and the impact is resource consumption, the overall risk remains moderate to low."}}}}, "created": "2026-03-16T09:21:55.133020+00:00", "updated": "2026-03-23T14:01:54.005273+00:00", "vendors": ["radare", "radare$PRODUCT$radare2"]}