Radare Radare2 vulnerabilities

CVE-2025-5648 [LOW] CWE-119 CVE-2025-5648: A vulnerability was found in Radare2 5.9.9. It has been classified as problematic. Affected is the f A vulnerability was found in Radare2 5.9.9. It has been classified as problematic. Affected is the function r_cons_pal_init in the library /libr/cons/pal.c of the component radiff2. The manipulation of the argument -T leads to memory corruption. An attack has to be approached locally. The complexity of an attack is rather high. The exploitability is told

CVE-2025-5642 [LOW] CWE-119 CVE-2025-5642: A vulnerability classified as problematic has been found in Radare2 5.9.9. Affected is the function A vulnerability classified as problematic has been found in Radare2 5.9.9. Affected is the function r_cons_pal_init in the library /libr/cons/pal.c of the component radiff2. The manipulation leads to memory corruption. The attack needs to be approached locally. The complexity of an attack is rather high. The exploitability is told to be difficult. The exp

CVE-2025-5643 [LOW] CWE-119 CVE-2025-5643: A vulnerability classified as problematic was found in Radare2 5.9.9. Affected by this vulnerability A vulnerability classified as problematic was found in Radare2 5.9.9. Affected by this vulnerability is the function cons_stack_load in the library /libr/cons/cons.c of the component radiff2. The manipulation of the argument -T leads to memory corruption. An attack has to be approached locally. The complexity of an attack is rather high. The exploitation

CVE-2025-5644 [LOW] CWE-119 CVE-2025-5644: A vulnerability, which was classified as problematic, has been found in Radare2 5.9.9. Affected by t A vulnerability, which was classified as problematic, has been found in Radare2 5.9.9. Affected by this issue is the function r_cons_flush in the library /libr/cons/cons.c of the component radiff2. The manipulation of the argument -T leads to use after free. Local access is required to approach this attack. The complexity of an attack is rather high. The

CVE-2025-5645 [LOW] CWE-119 CVE-2025-5645: A vulnerability, which was classified as problematic, was found in Radare2 5.9.9. This affects the f A vulnerability, which was classified as problematic, was found in Radare2 5.9.9. This affects the function r_cons_pal_init in the library /libr/cons/pal.c of the component radiff2. The manipulation of the argument -T leads to memory corruption. Attacking locally is a requirement. The complexity of an attack is rather high. The exploitability is told to

CVE-2025-60361 [LOW] CWE-401 CVE-2025-60361: radare2 v5.9.8 and before contains a memory leak in the function bochs_open. radare2 v5.9.8 and before contains a memory leak in the function bochs_open.

CVE-2025-5647 [LOW] CWE-119 CVE-2025-5647: A vulnerability was found in Radare2 5.9.9 and classified as problematic. This issue affects the fun A vulnerability was found in Radare2 5.9.9 and classified as problematic. This issue affects the function r_cons_context_break_pop in the library /libr/cons/cons.c of the component radiff2. The manipulation of the argument -T leads to memory corruption. The attack needs to be approached locally. The complexity of an attack is rather high. The exploitatio

CVE-2025-5641 [LOW] CWE-119 CVE-2025-5641: A vulnerability was found in Radare2 5.9.9. It has been rated as problematic. This issue affects the A vulnerability was found in Radare2 5.9.9. It has been rated as problematic. This issue affects the function r_cons_is_breaked in the library /libr/cons/cons.c of the component radiff2. The manipulation of the argument -T leads to memory corruption. It is possible to launch the attack on the local host. The complexity of an attack is rather high. The ex

CVE-2025-5646 [LOW] CWE-119 CVE-2025-5646: A vulnerability has been found in Radare2 5.9.9 and classified as problematic. This vulnerability af A vulnerability has been found in Radare2 5.9.9 and classified as problematic. This vulnerability affects the function r_cons_rainbow_free in the library /libr/cons/pal.c of the component radiff2. The manipulation of the argument -T leads to memory corruption. It is possible to launch the attack on the local host. The complexity of an attack is rather hi