Radare2 安全漏洞

Radare2 is an open-source reverse framework for Unix geeks developed by Radare. Versions of Radare2 prior to 6.1.4 contained security vulnerabilities. These vulnerabilities stemmed from the printgvars function in the PDB parser, which had issues with command injection, potentially allowing...

CVE-2025-60360

CVE-2025-60360 affects radare2 up to v5.9.8, where a memory leak in r2r_subprocess_init is reported. Multiple connected advisories (Ubuntu USN-7915-1, OSV, RH) describe the issue as memory leaks that could enable denial of service, with CVSSv3.1 metrics indicating a local attack vector, low attac...

CVE-2025-60359

radare2 v5.9.8 and before contains a memory leak in the function rbinobjectnew...

PT-2023-12936 · Radare2 · Radare2

Name of the Vulnerable Software and Affected Versions: radare2 versions 5.4.0 through 5.4.2 Description: The issue is related to a use after free in the r reg set value function. Recommendations: For versions 5.4.0 and 5.4.2, at the moment, there is no information about a newer version that...

radare2 资源管理错误漏洞

radare2 is a set of libraries and tools for working with binary files. radareorg A resource management error vulnerability exists in radare2 versions prior to 5.8.6, which stems from incorrectly parsing symbolic information in a COFF file, resulting in a segmentation error in at...