CVE-2025-1864CWE-119

Buffer Overflow and Potential Code Execution in Radare2

Critical · published March 3, 2025

CVSS v4.0
10.0
EPSS
0%
Percentile
40.6
In the wild
Unconfirmed
What it is

🔥 A buffer overflow vulnerability in radare2 could turn your memory into a playground for attackers! Think of it like a restaurant kitchen where the chef is preparing orders but the ingredients are overflowing off the prep table—if the chef doesn't keep an eye on it, all those extra ingredients can create a mess that disrupts the whole kitchen operation. An attacker could exploit this flaw to write data beyond the allocated memory, potentially leading to arbitrary code execution or crashes. With a CVSS score of 10, the stakes are incredibly high—this vulnerability could compromise the entire system!

Put simply

Think of it like a restaurant kitchen where the chef is preparing orders but the ingredients are overflowing off the prep table—if the chef doesn't keep an eye on it, all those extra ingredients can create a mess that disrupts the whole kitchen operation. This improper restriction of operations within a memory buffer allows attackers to manipulate memory allocation, which can lead to overflowing and executing unintended code. This vulnerability affects radare2 versions prior to <5.9.9.

What to do

An attacker could exploit this flaw to write data beyond the allocated memory, potentially leading to arbitrary code execution or crashes. With a CVSS score of 10, the stakes are incredibly high—this vulnerability could compromise the entire system! To protect your systems, patch radare2 immediately to version 5.9.9 or later. Regularly review your memory management practices and ensure that safety checks are in place to prevent such buffer overflows. You've got this! Implement these steps, and your system will be fortified in no time. 🛡️

The record
Technical detail
CVSS v4.0
10.0 · CRITICAL
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
EPSS
0.00482 · 40.6th percentile
Weakness
CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer
Published
2025-03-03T08:15Z
EPSS history
Timeline
  • 03 MAR 08:15Z
    Buffer Overflow and Potential Code Execution in Radare2
    cvelistv5