CVE-2017-6197: The r_read_* functions in libr/include/r_endian.h in radare2 1.2.1 allow remote attackers to cause a denial...

Security readout for executives and security teams

CVE-2017-6197 is a crash bug in radare2 1.2.1. A specially crafted binary file can trigger a NULL pointer dereference in endian-reading helper functions, causing the application to crash. The public sources do not show code execution or active exploitation. Exposure is most relevant where radare2 1.2.1 processes untrusted binaries, especially malware analysis, reverse-engineering services, CI pipelines, or automated file triage. Systems that do not use radare2, or only analyze trusted files manually, have lower practical exposure. Prioritize remediation if radare2 is embedded in customer-facing or automated binary analysis workflows. For occasional internal use, urgency is lower, but upgrading remains prudent because crafted files can disrupt analyst tools or processing jobs. Mitigation focus: Inventory radare2 installations and identify any version 1.2.1 usage.; Update radare2 to a release containing the upstream fix commit or later vendor package.; Avoid processing untrusted binaries with vulnerable radare2 builds..

Prepared

Jun 13, 2026, 06:02 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.