CVE-2025-61588

🗓️ 01 Oct 2025 23:30:26Reported by GitHub_MType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 37 Views

CVE-2025-61588: A safety flaw in sys_read lets host write guest memory and run arbitrary code.

Reporter	Title	Published	Views	Family All 11
CNNVD	RISC Zero Ethereum 代码注入漏洞	2 Oct 202500:00	–	cnnvd
Cvelist	CVE-2025-61588 risc0 vulnerable to arbitrary code execution in guest via memory safety failure in `sys_read`	1 Oct 202523:30	–	cvelist
EUVD	EUVD-2025-32056	3 Oct 202520:07	–	euvd
Github Security Blog	risc0 vulnerable to arbitrary code execution in guest via memory safety failure in `sys_read`	1 Oct 202521:04	–	github
NVD	CVE-2025-61588	2 Oct 202500:15	–	nvd
OSV	CVE-2025-61588 risc0 vulnerable to arbitrary code execution in guest via memory safety failure in `sys_read`	1 Oct 202523:30	–	osv
OSV	GHSA-JQQ4-C7WQ-36H7 risc0 vulnerable to arbitrary code execution in guest via memory safety failure in `sys_read`	1 Oct 202521:04	–	osv
Positive Technologies	PT-2025-40308	1 Oct 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-61588	6 Oct 202517:13	–	redhatcve
vulnersOsv	risc0-binfmt (>=1.0.0 <=1.2.6), risc0-build (>=0.1.0 <=1.2.6) +7 more potentially affected by CVE-2025-61588 via risc0-zkvm-platform (>=0.13.0 <=1.2.6)	1 Oct 202521:04	–	vulnersosv

Vulners

Node

risc0 risc0Range<2.1.0

[
  {
    "vendor": "risc0",
    "product": "risc0",
    "versions": [
      {
        "version": "< 2.1.0",
        "status": "affected"
      }
    ]
  }
]

Source	Link
github	www.github.com/risc0/risc0/pull/3351
github	www.github.com/risc0/risc0/commit/3f00e1fa0159599c1601e788021f2169d1f0a4dc
github	www.github.com/risc0/risc0/security/advisories/GHSA-jqq4-c7wq-36h7

17 Jun 2026 09:50Current

7.2High risk

Vulners AI Score7.2

CVSS 49.3

EPSS0.00422

SSVC

CWE-94