Vulnerability Description
A NULL pointer dereference vulnerability was discovered in radare2 6.0.5 and earlier within the load() function of bin_dyldcache.c. Processing a crafted file can cause a segmentation fault and crash the program.
CVSS Score
4.3
MEDIUM
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Radare | Radare2 | <= 6.0.5 |
Related Weaknesses (CWE)
References
- https://github.com/marlinkcyber/advisories/blob/main/advisories/MCSAID-2025-002-PatchThird Party Advisory
- https://github.com/marlinkcyber/advisories/blob/main/advisories/radare2-nullptr-PatchThird Party Advisory
- https://github.com/radareorg/radare2/commit/e37e15d10fd8a19c3e57b3d7735a2cfe0082Patch
- https://github.com/radareorg/radare2/issues/24661Issue Tracking
FAQ
What is CVE-2025-63744?
CVE-2025-63744 is a vulnerability with a CVSS score of 4.3 (MEDIUM). A NULL pointer dereference vulnerability was discovered in radare2 6.0.5 and earlier within the load() function of bin_dyldcache.c. Processing a crafted file can cause a segmentation fault and crash t...
How severe is CVE-2025-63744?
CVE-2025-63744 has been rated MEDIUM with a CVSS base score of 4.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2025-63744?
Check the references section above for vendor advisories and patch information. Affected products include: Radare Radare2.