Log in Start free

Vulnerability · Published Feb 17, 2025 · Assigned by VulDB

CVE-2025-1378radare2 rasm2 rasm2.c memory corruption

Low 3.3

In plain English

A low-severity memory corruption in radare2. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 25% of all known vulnerabilities).

Severity (CVSS 3.1)3.3Low
Exploit odds (30 days)0.3%top 75.5% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

A vulnerability, which was classified as problematic, was found in radare2 5.9.9 33286. Affected is an unknown function in the library /libr/main/rasm2.c of the component rasm2. The manipulation leads to memory corruption. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. Upgrading to version 6.0.0 is able to address this issue. The patch is identified as c6c772d2eab692ce7ada5a4227afd50c355ad545. It is recommended to upgrade the affected component.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Ubuntu:25.10radare2no fix listedUBUNTU-CVE-2025-1378
Ubuntu:26.04:LTSradare2no fix listedUBUNTU-CVE-2025-1378
Ubuntu:26.10radare2no fix listedUBUNTU-CVE-2025-1378

Affected products (as reported)

VendorProductVersions
n/a radare2 5.9.9 33286

Weakness: CWE-119 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

References