PT-2025-23902 · Radare2 · Radare2

Rootsec · Published 2025-06-05 · Updated 2025-06-05 · CVE-2025-5644

Positive Technologies (AI Summary)

CVSS v4.0

2.0

Low

Base vector

AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions Radare2 version 5.9.9

Description A vulnerability has been found in the function r cons flush in the library /libr/cons/cons.c of the component radiff2. The manipulation of the argument -T leads to use after free. Local access is required to approach this attack. The complexity of an attack is rather high. The exploitation is known to be difficult. The real existence of this vulnerability is still doubted at the moment. The documentation explains that the parameter -T is experimental and "crashy". Further analysis has shown "the race is not a real problem unless you use asan". A new warning has been added.

Recommendations To fix this issue, it is recommended to apply a patch with the name 5705d99cc1f23f36f9a84aab26d1724010b97798. As a temporary workaround, consider disabling the use of the experimental parameter -T until a patch is available. Restrict access to the vulnerable function r cons flush in the radiff2 component to minimize the risk of exploitation.

Exploit

Fix

Use After Free

Buffer Overflow

Weakness Enumeration

CWE-416

CWE-119

Related Identifiers

CVE-2025-5644

Affected Products

Radare2

References · 16

• 🔥 https://drive.google.com/file/d/1VtiMMp7ECun3sq3AwlqQrU9xEPA45eOz/view?usp=sharing · Exploit
• https://github.com/radareorg/radare2/commit/5705d99cc1f23f36f9a84aab26d1724010b97798 · Patch
• https://github.com/radareorg/radare2/issues/24233#issuecomment-2918847833 · Vendor Advisory
• https://github.com/radareorg/radare2/issues/24233 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-5644 · Security Note
• https://ubuntu.com/security/CVE-2025-5644 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-5644 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-5644 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-5644 · Vendor Advisory
• https://t.me/cvetracker/25490 · Telegram Post
• https://vuldb.com/?submit.586921 · Note
• https://vuldb.com/?id.311132 · Note
• https://twitter.com/VulmonFeeds/status/1930543735692984423 · Twitter Post
• https://t.me/cvenotify/124730 · Telegram Post
• https://vuldb.com/?ctiid.311132 · Note