CVE - CVE-2025-5641

CVE-ID
CVE-2025-5641	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
A vulnerability was found in Radare2 5.9.9. It has been rated as problematic. This issue affects the function r_cons_is_breaked in the library /libr/cons/cons.c of the component radiff2. The manipulation of the argument -T leads to memory corruption. It is possible to launch the attack on the local host. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. The real existence of this vulnerability is still doubted at the moment. The identifier of the patch is 5705d99cc1f23f36f9a84aab26d1724010b97798. It is recommended to apply a patch to fix this issue. The documentation explains that the parameter -T is experimental and "crashy". Further analysis has shown "the race is not a real problem unless you use asan". An additional warning regarding threading support has been added.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:Submit #586909 \| radare2 radiff2 5.9.9 and master branch Memory corruption URL:https://vuldb.com/?submit.586909 MISC:VDB-311129 \| CTI Indicators (IOB, IOC, IOA) URL:https://vuldb.com/?ctiid.311129 MISC:VDB-311129 \| Radare2 radiff2 cons.c r_cons_is_breaked memory corruption URL:https://vuldb.com/?id.311129 MISC:https://drive.google.com/file/d/1oG5IC7qhL_SJsIHpnWp7MZlWJGYt8qWZ/view?usp=sharing URL:https://drive.google.com/file/d/1oG5IC7qhL_SJsIHpnWp7MZlWJGYt8qWZ/view?usp=sharing MISC:https://github.com/radareorg/radare2/commit/5705d99cc1f23f36f9a84aab26d1724010b97798 URL:https://github.com/radareorg/radare2/commit/5705d99cc1f23f36f9a84aab26d1724010b97798 MISC:https://github.com/radareorg/radare2/issues/24230 URL:https://github.com/radareorg/radare2/issues/24230 MISC:https://github.com/radareorg/radare2/issues/24230#issuecomment-2919612676 URL:https://github.com/radareorg/radare2/issues/24230#issuecomment-2919612676
Assigning CNA
VulDB
Date Record Created
20250604	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20250604)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)