PT-2025-6907

CVE-2025-1378

Published

2025-02-16

Updated

2025-06-23

Description by

CVSS 4.0

4.8

Medium

MetricsAV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions: radare2 versions 5.9.9 through 5.9.9 33286

Description: A vulnerability was found in radare2, affecting an unknown function in the library /libr/main/rasm2.c of the component rasm2. The manipulation leads to memory corruption. An attack has to be approached locally. The exploit has been disclosed to the public and may be used.

Recommendations: To address this issue, upgrade to version 6.0.0. The patch is identified as c6c772d2eab692ce7ada5a4227afd50c355ad545. It is recommended to upgrade the affected component.

Exploitability

Exploit

Fix

Impacts

Researchers

Wenjusun

Vendors

Affected products

Weakness enumeration

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

Related identifiers

CVE-2025-1378