Vulnerability Description
A NULL pointer dereference vulnerability was discovered in radare2 6.0.5 and earlier within the info() function of bin_ne.c. A crafted binary input can trigger a segmentation fault, leading to a denial of service when the tool processes malformed data.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Radare | Radare2 | <= 6.0.5 |
Related Weaknesses (CWE)
References
- https://github.com/marlinkcyber/advisories/blob/main/advisories/MCSAID-2025-001-PatchThird Party Advisory
- https://github.com/marlinkcyber/advisories/blob/main/advisories/radare2-nullptr-PatchThird Party Advisory
- https://github.com/radareorg/radare2/commit/6c5df3f8570d4f0c360681c08241ad8af3b9Patch
- https://github.com/radareorg/radare2/issues/24660Issue Tracking
FAQ
What is CVE-2025-63745?
CVE-2025-63745 is a vulnerability with a CVSS score of 5.5 (MEDIUM). A NULL pointer dereference vulnerability was discovered in radare2 6.0.5 and earlier within the info() function of bin_ne.c. A crafted binary input can trigger a segmentation fault, leading to a denia...
How severe is CVE-2025-63745?
CVE-2025-63745 has been rated MEDIUM with a CVSS base score of 5.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2025-63745?
Check the references section above for vendor advisories and patch information. Affected products include: Radare Radare2.