PT-2025-23900 · Radare2 · Radare2

Rootsec · Published 2025-06-05 · Updated 2025-06-05 · CVE-2025-5642

Positive Technologies (AI Summary)

CVSS v4.0

2.0

Low

Base vector

AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Radare2 version 5.9.9

Description A problematic vulnerability has been found in Radare2, affecting the function r cons pal init in the library /libr/cons/pal.c of the component radiff2. The manipulation leads to memory corruption. The attack needs to be approached locally and has a rather high complexity. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. The real existence of this vulnerability is still doubted at the moment. The documentation explains that the parameter -T is experimental and "crashy". Further analysis has shown that the issue is not a real problem unless asan is used. A new warning has been added.

Recommendations To fix this issue, it is recommended to apply a patch, identified as 5705d99cc1f23f36f9a84aab26d1724010b97798. As a temporary workaround, consider disabling the r cons pal init function until a patch is available. Additionally, avoid using the experimental parameter -T unless necessary, and be cautious when using asan to minimize the risk of exploitation.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2025-5642

Affected Products

Radare2

References · 16

• 🔥 https://drive.google.com/file/d/1joXpofhKSeb3uJ034ayVuWIoJj08gm_9/view?usp=sharing · Exploit
• https://github.com/radareorg/radare2/commit/5705d99cc1f23f36f9a84aab26d1724010b97798 · Patch
• https://github.com/radareorg/radare2/issues/24231 · Vendor Advisory
• https://github.com/radareorg/radare2/issues/24231#issuecomment-2918848163 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-5642 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-5642 · Security Note
• https://osv.dev/vulnerability/CVE-2025-5642 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-5642 · Security Note
• https://ubuntu.com/security/CVE-2025-5642 · Vendor Advisory
• https://vuldb.com/?ctiid.311130 · Note
• https://twitter.com/CVEnew/status/1930518128976392574 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1930546295464251529 · Twitter Post
• https://vuldb.com/?submit.586910 · Note
• https://t.me/cvetracker/25488 · Telegram Post
• https://vuldb.com/?id.311130 · Note