CVE - CVE-2025-5643

CVE-ID
CVE-2025-5643	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
A vulnerability classified as problematic was found in Radare2 5.9.9. Affected by this vulnerability is the function cons_stack_load in the library /libr/cons/cons.c of the component radiff2. The manipulation of the argument -T leads to memory corruption. An attack has to be approached locally. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The real existence of this vulnerability is still doubted at the moment. The patch is named 5705d99cc1f23f36f9a84aab26d1724010b97798. It is recommended to apply a patch to fix this issue. The documentation explains that the parameter -T is experimental and "crashy". Further analysis has shown "the race is not a real problem unless you use asan". A new warning has been added.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:Submit #586912 \| radare2 radiff2 5.9.9 and master branch Memory corruption URL:https://vuldb.com/?submit.586912 MISC:VDB-311131 \| CTI Indicators (IOB, IOC, IOA) URL:https://vuldb.com/?ctiid.311131 MISC:VDB-311131 \| Radare2 radiff2 cons.c cons_stack_load memory corruption URL:https://vuldb.com/?id.311131 MISC:https://drive.google.com/file/d/1XsoyD7lMC-9a9Cxhld8sdEE-0PF3lxvB/view?usp=sharing URL:https://drive.google.com/file/d/1XsoyD7lMC-9a9Cxhld8sdEE-0PF3lxvB/view?usp=sharing MISC:https://github.com/radareorg/radare2/commit/5705d99cc1f23f36f9a84aab26d1724010b97798 URL:https://github.com/radareorg/radare2/commit/5705d99cc1f23f36f9a84aab26d1724010b97798 MISC:https://github.com/radareorg/radare2/issues/24232 URL:https://github.com/radareorg/radare2/issues/24232 MISC:https://github.com/radareorg/radare2/issues/24232#issuecomment-2918841776 URL:https://github.com/radareorg/radare2/issues/24232#issuecomment-2918841776
Assigning CNA
VulDB
Date Record Created
20250604	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20250604)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)