BaseFortify

Publication date: 2025-11-14

Last updated on: 2025-11-19

Assigner: MITRE

Description

A NULL pointer dereference vulnerability was discovered in radare2 6.0.5 and earlier within the load() function of bin_dyldcache.c. Processing a crafted file can cause a segmentation fault and crash the program.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-11-14

Last Modified

2025-11-19

Generated

2026-07-06

AI Q&A

2025-11-14

EPSS Evaluated

2026-07-05

NVD

CVE-2025-63744

Affected Vendors & Products

Vendor	Product	Version / Range
radare	radare2	to 6.0.5 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-476	The product dereferences a pointer that it expects to be valid but is NULL.

Attack-Flow Graph

Executive Summary

This vulnerability is a NULL pointer dereference in radare2 version 6.0.5 and earlier, specifically in the load() function of the bin_dyldcache.c file. When processing a specially crafted file, this flaw can cause the program to crash due to a segmentation fault.

Impact Analysis

The vulnerability can cause radare2 to crash unexpectedly when processing maliciously crafted files, potentially disrupting workflows or services that rely on this software. It may lead to denial of service conditions but does not indicate code execution or data corruption.

Hi! I’m here to help you understand CVE-2025-63744. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70