CVE-2025-1744CWE-787

Out-of-bounds Write in radare2

Critical · published February 28, 2025

CVSS v4.0
10.0
EPSS
1%
Percentile
42.4
In the wild
Unconfirmed
What it is

🔥 An out-of-bounds write vulnerability in radare2 allows attackers to pull a sneaky trick with memory management — think a magician pulling a rabbit from a hat that shouldn’t even be there! This vulnerability is like having a guest who sneaks into a room they weren’t invited to, rummaging through your belongings, and tossing things around haphazardly. It can lead to chaos in your system, just as an uninvited guest might knock over priceless antiques. An attacker exploiting this could execute arbitrary code, leading to a complete system compromise. Imagine someone gaining full control of your setup, snooping through sensitive files, or even planting malicious software. It's a recipe for an absolute disaster!

Put simply

This vulnerability is like having a guest who sneaks into a room they weren’t invited to, rummaging through your belongings, and tossing things around haphazardly. It can lead to chaos in your system, just as an uninvited guest might knock over priceless antiques. This out-of-bounds write vulnerability in radare2, affecting versions before 5.9.9, allows attackers to exploit memory management flaws, leading to heap-based buffer over-read or overflow scenarios.

What to do

An attacker exploiting this could execute arbitrary code, leading to a complete system compromise. Imagine someone gaining full control of your setup, snooping through sensitive files, or even planting malicious software. It's a recipe for an absolute disaster! Update radare2 immediately to version 5.9.9 or later to close this security gap. It’s crucial to audit any instances running earlier versions to prevent unauthorized access. Don't delay — this is a critical fix! You've got this! Patch up and secure your system — your hero status is in the making! 🛡️

The record
Technical detail
CVSS v4.0
10.0 · CRITICAL
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
EPSS
0.00507 · 42.4th percentile
Weakness
CWE-787 · Out-of-bounds Write
Published
2025-02-28T03:24Z
EPSS history
Timeline
  • 28 FEB 03:24Z
    Out-of-bounds Write in radare2
    cvelistv5