A memory leak vulnerability in radare2 versions 5.9.8 and earlier poses a risk of local denial of service through resource exhaustion.

This vulnerability is a memory leak occurring in the _load_relocations function, which can be triggered by a local attacker with low privileges. The flaw allows for the exhaustion of system memory, potentially leading to application instability or a crash.

The vulnerability carries a CVSS score of 7.5, indicating a high severity, primarily due to its potential to cause a denial of service. While exploitation requires local access, the resulting instability can disrupt critical analysis workflows, leading to productivity loss or the inability to perform security tasks using the affected software.

Immediate Action: Monitor the official radare2 GitHub repository for the release of a patch that addresses the memory leak in the _load_relocations function.

Proactive Monitoring: Review system memory usage and application logs for signs of abnormal consumption or repeated crashes when processing binary files.

Compensating Controls: Restrict access to the system where radare2 is installed to authorized users only to mitigate the risk of local exploitation.

Public Exploit Available: No (exploit_available: false)

Given the potential for a denial of service, administrators should prioritize updating radare2 once the vendor provides a corrected version. Until a fix is available, ensure that only trusted users have the ability to execute the software on sensitive systems to prevent unauthorized resource exhaustion.