Memory Leak Vulnerability in radare2 by Radareorg
CVE-2025-60359

5.5MEDIUM

Key Information:

Vendor

Radareorg

Status
radare2
Vendor
CVE Published:
17 October 2025

What is CVE-2025-60359?

A memory leak has been identified in radare2, specifically in the function r_bin_object_new. This flaw may allow for inefficient memory usage, potentially leading to application crashes or degraded performance. Developers are urged to review the affected versions to ensure proper memory management and mitigate any adverse effects on system stability.

References

https://github.com/radareorg/radare2/pull/24215

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.