What is CVE-2026-4174?

CVE-2026-4174 is a low-severity vulnerability in Radare2, classified under Uncontrolled Resource Consumption. CVSS score: 3.3/10. Published 2026-03-16.

How severe is CVE-2026-4174?

Low severity. CVSS v3 base score is 3.3 out of 10.

Resource exhaustion in Radare2

CVE-2026-4174

A vulnerability has been found in Radare2 5.9.9. This issue affects the function walk_exports_trie of the file libr/bin/format/mach0/mach0.c of the component Mach-O File Parser. Such manipulation leads to resource consumption. The attack c…

Vulnerability class: DoS (Denial of Service)

EPSS: 0.000 (5.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 3.3 (Low). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L.

Affected products

N/a Radare2 — versions 5.9.9, 6.1.2

Weakness classification (CWE)

References

VDB-351081 | Radare2 Mach-O File mach0.c walk_exports_trie resource consumption (technical-description, vdb-entry)
VDB-351081 | CTI Indicators (IOB, IOC, IOA) (signature, permissions-required)
Submit #769799 | radareorg Radare2 5.9.9 Denial of Service (third-party-advisory)
cna@vuldb.com (issue-tracking)
cna@vuldb.com (exploit)
cna@vuldb.com (patch)
cna@vuldb.com (patch)

Frequently asked questions

What is CVE-2026-4174?: CVE-2026-4174 is a low-severity vulnerability in Radare2, classified under Uncontrolled Resource Consumption. CVSS score: 3.3/10. Published 2026-03-16.
How severe is CVE-2026-4174?: Low severity. CVSS v3 base score is 3.3 out of 10.