CVE-2025-63744

Опубликовано: 14 нояб. 2025

Источник: nvd

CVSS3: 4.3

EPSS Низкий

Описание

A NULL pointer dereference vulnerability was discovered in radare2 6.0.5 and earlier within the load() function of bin_dyldcache.c. Processing a crafted file can cause a segmentation fault and crash the program.

Ссылки

https://github.com/marlinkcyber/advisories/blob/main/advisories/MCSAID-2025-002-radare2-nullptr-deref-bin_dyldcache.md
Patch
Third Party Advisory
https://github.com/marlinkcyber/advisories/blob/main/advisories/radare2-nullptr-deref-bin_dyldcache.md
Patch
Third Party Advisory
https://github.com/radareorg/radare2/commit/e37e15d10fd8a19c3e57b3d7735a2cfe0082ec79
Patch
https://github.com/radareorg/radare2/issues/24661
Issue Tracking

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:radare:radare2:*:*:*:*:*:*:*:*

Версия до 6.0.5 (включая)

EPSS

Процентиль: 21%

0.00288

Низкий

4.3 Medium

CVSS3

Дефекты

CWE-476

Связанные уязвимости

CVE-2025-63744

CVSS3: 4.3

ubuntu

10 месяцев назад

CVE-2025-63744

CVSS3: 4.3

debian

10 месяцев назад

A NULL pointer dereference vulnerability was discovered in radare2 6.0 ...

GHSA-3hfj-mrxp-x3v9

CVSS3: 5.3

github

10 месяцев назад

EPSS

Процентиль: 21%

0.00288

Низкий

4.3 Medium

CVSS3

Дефекты

CWE-476