Buffer Overflow Vulnerability in radare2 by radareorg
CVE-2025-1864

10CRITICAL

Key Information:

Vendor

Radareorg

Status
Radare2
Vendor
CVE Published:
3 March 2025

What is CVE-2025-1864?

A buffer overflow vulnerability exists in the radare2 software developed by radareorg, allowing attackers to perform unauthorized operations that exceed the allocated memory boundaries. This can lead to potential exploitation of system resources, affecting stability and security. The issue specifically impacts versions of radare2 released prior to 5.9.9, emphasizing the need for timely updates to safeguard against potential attacks. Users are advised to review their version and apply necessary patches to mitigate this risk.

Affected Version(s)

radare2 0

References

https://github.com/radareorg/radare2/pull/23981

CVSS V4

Score:
10
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

TITAN Team ([email protected])
.