CVE-2025-5644

A vulnerability, which was classified as problematic, has been found in Radare2 5.9.9. Affected by this issue is the function rconsflush in the library /libr/cons/cons.c of the component radiff2. The manipulation of the argument -T leads to use after free. Local access is required to approach thi...

CVE-2025-5644 Radare2 radiff2 cons.c r_cons_flush use after free

A vulnerability, which was classified as problematic, has been found in Radare2 5.9.9. Affected by this issue is the function rconsflush in the library /libr/cons/cons.c of the component radiff2. The manipulation of the argument -T leads to use after free. Local access is required to approach thi...

CVE-2025-5644

Radare2 5.9.9/radiff2 contains a use-after-free in r_cons_flush when manipulating the -T argument. Affected file: libr/cons/cons.c (function r_cons_flush). Local access required; attack complexity is high. Patch identified as 5705d99cc1f23f36f9a84aab26d1724010b97798. Documentation notes -T is exp...

CVE-2025-5644 Radare2 radiff2 cons.c r_cons_flush use after free

A vulnerability, which was classified as problematic, has been found in Radare2 5.9.9. Affected by this issue is the function rconsflush in the library /libr/cons/cons.c of the component radiff2. The manipulation of the argument -T leads to use after free. Local access is required to approach thi...

CVE-2025-5643

A vulnerability classified as problematic was found in Radare2 5.9.9. Affected by this vulnerability is the function consstackload in the library /libr/cons/cons.c of the component radiff2. The manipulation of the argument -T leads to memory corruption. An attack has to be approached locally. The...

CVE-2025-5643

Radare2 5.9.9 is affected by CVE-2025-5643 through the cons_stack_load function in libr/cons/cons.c. The vulnerability arises from manipulating the -T argument, causing memory corruption. Exploitation is local with high attack complexity; exploits have been disclosed but the real existence is dou...

CVE-2025-5641

A vulnerability was found in Radare2 5.9.9. It has been rated as problematic. This issue affects the function rconsisbreaked in the library /libr/cons/cons.c of the component radiff2. The manipulation of the argument -T leads to memory corruption. It is possible to launch the attack on the local...

PT-2025-23905 · Radare2 · Radare2

Name of the Vulnerable Software and Affected Versions: Radare2 version 5.9.9 Description: A vulnerability was found in Radare2 and classified as problematic. This issue affects the function r cons context break pop in the library /libr/cons/cons.c of the component radiff2. The manipulation of the...

PT-2025-23899 · Radare2 · Radare2

Name of the Vulnerable Software and Affected Versions: Radare2 version 5.9.9 Description: A vulnerability was found in Radare2, affecting the function r cons is breaked in the library /libr/cons/cons.c of the component radiff2. The manipulation of the argument -T leads to memory corruption. It is...

PT-2025-23900 · Radare2 · Radare2

Name of the Vulnerable Software and Affected Versions: Radare2 version 5.9.9 Description: A problematic vulnerability has been found in Radare2, affecting the function r cons pal init in the library /libr/cons/pal.c of the component radiff2. The manipulation leads to memory corruption. The attack...

CVE-2022-28070

A null pointer deference in coreanalfcn function in radare2 5.4.2 and 5.4.0...

CVE-2020-27794

A double free issue was discovered in radare2 in cmdinfo.c:cmdinfo. Successful exploitation could lead to modification of unexpected memory locations and potentially causing a crash...

CVE-2017-7946

The getrelocs64 function in libr/bin/format/mach0/mach0.c in radare2 1.3.0 allows remote attackers to cause a denial of service use-after-free and application crash via a crafted Mach0 file...

CVE-2025-1864

A flaw was found in radare2. This vulnerability allows buffer overflow via improper restriction of operations within the bounds of a memory buffer. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria...

CVE-2025-1864

Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in radareorg radare2 allows Overflow Buffers.This issue affects radare2: before 5.9.9...

UBUNTU-CVE-2025-1864

Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in radareorg radare2 allows Overflow Buffers.This issue affects radare2: before 5.9.9...

CVE-2025-1864 Buffer Overflow and Potential Code Execution in Radare2

Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in radareorg radare2 allows Overflow Buffers.This issue affects radare2: before 5.9.9...

CVE-2025-1864 Buffer Overflow and Potential Code Execution in Radare2

Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in radareorg radare2 allows Overflow Buffers.This issue affects radare2: before 5.9.9...

CVE-2025-1864 Buffer Overflow and Potential Code Execution in Radare2

Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in radareorg radare2 allows Overflow Buffers.This issue affects radare2: before 5.9.9...

CVE-2025-1864

CVE-2025-1864 affects radare2 (radareorg) prior to 5.9.9, due to an improper restriction of operations within the bounds of a memory buffer, enabling a buffer overflow. The issue is documented across multiple advisories/plugins, including openSUSE and Fedora updates that fix CVE-2025-1864 (and re...