radare2 binary loading allows command execution

Opening a malicious file in an analysis tool can run commands on your PC.

Summary

The radare2 reverse engineering tool can let an attacker run commands when it opens or analyzes a crafted Pebble or Sega Mega Drive binary. Versions before 6.2.2 are affected.

Affected when

Opening or analyzing a crafted Pebble or Sega Mega Drive binary

What to do

Update to radare2 6.2.2 or later.

Products and platforms

macOS
Linux
radare2

CVE IDs

CVE-2026-108387 (opens in a new tab)

Sources

CVE record: cve.org (opens in a new tab)

Times

First published 2026-11-04 22:26 UTC

First seen 2026-11-09 16:20 UTC