CVE-2025-63744
Unknown
Unknown - Not Provided
BaseFortify
Publication date: 2025-11-14
Last updated on: 2025-11-19
Assigner: MITRE
Description
Description
A NULL pointer dereference vulnerability was discovered in radare2 6.0.5 and earlier within the load() function of bin_dyldcache.c. Processing a crafted file can cause a segmentation fault and crash the program.
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| radare | radare2 | to 6.0.5 (inc) |
Helpful Resources
Exploitability
CWE
KEV
| CWE ID | Description |
|---|---|
| CWE-476 | The product dereferences a pointer that it expects to be valid but is NULL. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is a NULL pointer dereference in radare2 version 6.0.5 and earlier, specifically in the load() function of the bin_dyldcache.c file. When processing a specially crafted file, this flaw can cause the program to crash due to a segmentation fault.
How can this vulnerability impact me? :
The vulnerability can cause radare2 to crash unexpectedly when processing maliciously crafted files, potentially disrupting workflows or services that rely on this software. It may lead to denial of service conditions but does not indicate code execution or data corruption.
Ask Our AI Assistant
Need more information? Ask your question to get an AI reply (Powered by our expertise)
0/70