BaseFortify

Publication date: 2025-10-17

Last updated on: 2025-10-23

Assigner: MITRE

Description

radare2 v5.9.8 and before contains a memory leak in the function bochs_open.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-10-17

Last Modified

2025-10-23

Generated

2026-07-06

AI Q&A

2025-10-17

EPSS Evaluated

2026-07-05

NVD

CVE-2025-60361

Affected Vendors & Products

Vendor	Product	Version / Range
radare	radare2	to 5.9.8 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-401	The product does not sufficiently track and release allocated memory after it has been used, making the memory unavailable for reallocation and reuse.

Attack-Flow Graph

Executive Summary

This vulnerability is a memory leak found in radare2 version 5.9.8 and earlier, specifically in the function bochs_open. A memory leak means that the program improperly manages memory allocations, potentially causing increased memory usage over time.

Impact Analysis

The impact of this vulnerability is limited to a loss of availability due to increased memory consumption, which could degrade system performance or cause the application to crash. It does not affect confidentiality or integrity.

Compliance Impact

This vulnerability does not impact confidentiality or integrity of data, so it is unlikely to affect compliance with standards like GDPR or HIPAA that focus on data protection and privacy.

Hi! I’m here to help you understand CVE-2025-60361. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70