PT-2025-23899 · Radare2 · Radare2
Rootsec
·
Published
2025-06-05
·
Updated
2025-07-03
·
CVE-2025-5641
CVSS v4.0
2.0
Low
| Vector | AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N |
Name of the Vulnerable Software and Affected Versions
Radare2 version 5.9.9
Description
A vulnerability was found in Radare2, affecting the function
r cons is breaked in the library /libr/cons/cons.c of the component radiff2. The manipulation of the argument -T leads to memory corruption. It is possible to launch the attack on the local host. The complexity of an attack is rather high, and the exploitation is known to be difficult. The real existence of this vulnerability is still doubted at the moment. The documentation explains that the parameter -T is experimental and "crashy". Further analysis has shown that "the race is not a real problem unless you use asan". An additional warning regarding threading support has been added.Recommendations
To fix this issue, it is recommended to apply a patch with the identifier 5705d99cc1f23f36f9a84aab26d1724010b97798. As a temporary workaround, consider disabling the use of the experimental parameter
-T until a patch is available. Restrict access to the vulnerable function r cons is breaked to minimize the risk of exploitation. Avoid using the parameter -T in the affected component radiff2 until the issue is resolved.Exploit
Fix
Buffer Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Radare2