CVE-2021-44975: radareorg radare2 5.5.2 is vulnerable to Buffer Overflow via /libr/core/anal_objc.c mach-o parser.

Security readout for executives and security teams

CVE-2021-44975 is a reported buffer overflow in radare2 5.5.2 when its Mach-O parser handles Objective-C analysis. The main business concern is analyst or automation systems processing untrusted Mach-O files. The source bundle does not provide CVSS, confirmed impact, or a named fix. Exposure is most likely on workstations, CI jobs, malware sandboxes, or reverse-engineering pipelines using radare2 5.5.2 to inspect untrusted Mach-O binaries. Organizations not using radare2, or not parsing Mach-O content with it, are unlikely to be exposed based on the provided sources. Handle as a targeted tooling-risk review, not a confirmed enterprise-wide emergency. Prioritize teams that analyze untrusted binaries, especially macOS or iOS samples, and confirm whether radare2 5.5.2 is still deployed. Mitigation focus: Inventory systems and workflows using radare2 5.5.2.; Check radare2 vendor guidance and issue 19476 for fixed versions or workarounds.; Avoid processing untrusted Mach-O files with affected radare2 builds until guidance is confirmed..

Prepared

Jun 2, 2026, 09:45 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.