CVE-2021-44974: radareorg radare2 version 5.5.2 is vulnerable to NULL Pointer Dereference via libr/bin/p/bin_symbols.c bina...

Security readout for executives and security teams

CVE-2021-44974 is a NULL pointer dereference in radare2 5.5.2's binary symbol parser. In practical terms, affected use is most likely to crash the tool while analyzing a problematic binary, causing analysis disruption rather than confirmed system compromise. Exposure is likely limited to environments running radare2 5.5.2, especially malware analysis, reverse engineering, CI, or research workflows that process untrusted binary files. Treat this as a routine remediation item unless radare2 5.5.2 is used heavily on untrusted files in business-critical analysis pipelines. Mitigation focus: Inventory systems and workflows using radare2 5.5.2.; Check radare2 vendor guidance and release notes for fixed versions.; Avoid processing untrusted binaries with affected radare2 builds where practical..

Prepared

Jun 2, 2026, 09:45 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.