Radare2 could be made to crash if it received specially crafted
input.
Software Description:
- radare2: free and advanced command line hexadecimal editor
Details:
It was discovered that Radare2 conntained a memory leak, resulting
in performance degradation. An attacker could possibly use this
issue to cause Radare2 to crash, resulting in a denial of
service. (CVE-2025-60358)
The problem can be corrected by updating your system to the following package versions: Ubuntu 25.10 libradare2-5.0.0t64 5.9.8+dfsg-2ubuntu0.25.10.1 libradare2-common 5.9.8+dfsg-2ubuntu0.25.10.1 Ubuntu 25.04 libradare2-5.0.0t64 5.9.8+dfsg-2ubuntu0.25.04.1 libradare2-common 5.9.8+dfsg-2ubuntu0.25.04.1 In general, a standard system update will make all the necessary changes.
https://ubuntu.com/security/notices/USN-7842-1
CVE-2025-60358
Get the latest Linux and open source security news straight to your inbox.