PT-2025-23904 · Radare2 · Radare2

Rootsec

·

Publicado

2025-06-05

·

Atualizado

2025-06-05

·

CVE-2025-5646

CVSS v4.0

2.0

Baixa

VetorAV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Name of the Vulnerable Software and Affected Versions Radare2 version 5.9.9
Description A problem has been found in the function r cons rainbow free in the library /libr/cons/pal.c of the component radiff2. The manipulation of the argument -T leads to memory corruption. It is possible to launch the attack on the local host. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The real existence of this vulnerability is still doubted at the moment. The documentation explains that the parameter -T is experimental and "crashy". Further analysis has shown "the race is not a real problem unless you use asan". A new warning has been added.
Recommendations To fix this issue, apply a patch identified as 5705d99cc1f23f36f9a84aab26d1724010b97798. As a temporary workaround, consider avoiding the use of the experimental parameter -T until the issue is resolved. Restrict access to the vulnerable function r cons rainbow free to minimize the risk of exploitation.

Exploit

Correção

Buffer Overflow

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2025-5646

Produtos afetados

Radare2