CVE-2025-1378

LOW

radare2 5.9.9 33286 - Memory Corruption in rasm2 Library

Title source: llm
STIX 2.1

Description

A vulnerability, which was classified as problematic, was found in radare2 5.9.9 33286. Affected is an unknown function in the library /libr/main/rasm2.c of the component rasm2. The manipulation leads to memory corruption. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. Upgrading to version 6.0.0 is able to address this issue. The patch is identified as c6c772d2eab692ce7ada5a4227afd50c355ad545. It is recommended to upgrade the affected component.

References (7)

Core 7
Core References
Third Party Advisory, VDB Entry vdb-entry
https://vuldb.com/?id.295986
Permissions Required, VDB Entry signature permissions-required
https://vuldb.com/?ctiid.295986
Third Party Advisory, VDB Entry third-party-advisory
https://vuldb.com/?submit.498499
Exploit, Issue Tracking, Vendor Advisory issue-tracking
https://github.com/radareorg/radare2/issues/23953
Exploit, Issue Tracking, Vendor Advisory exploit issue-tracking
https://github.com/radareorg/radare2/issues/23953#issue-2844325926

Scores

CVSS v3 3.3
EPSS 0.0029
EPSS Percentile 21.1%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-119
Status published
Products (1)
radare/radare2 5.9.9
Published Feb 17, 2025
Tracked Since Feb 18, 2026