BaseFortify

Publication date: 2025-10-16

Last updated on: 2025-10-23

Assigner: MITRE

Description

radare2 v.5.9.8 and before contains a memory leak in the function _load_relocations.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-10-16

Last Modified

2025-10-23

Generated

2026-07-06

AI Q&A

2025-10-16

EPSS Evaluated

2026-07-05

NVD

CVE-2025-60358

Affected Vendors & Products

Vendor	Product	Version / Range
radare	radare2	to 5.9.8 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-401	The product does not sufficiently track and release allocated memory after it has been used, making the memory unavailable for reallocation and reuse.

Attack-Flow Graph

Executive Summary

This vulnerability is a memory leak in the function _load_relocations in radare2 version 5.9.8 and earlier. A memory leak means that the program does not properly release memory it has allocated, which can lead to increased memory usage over time.

Impact Analysis

The memory leak can cause the affected application to consume more memory than expected, potentially leading to degraded performance or crashes if the system runs out of memory.

Hi! I’m here to help you understand CVE-2025-60358. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70