Skip to content
OpenAdvisories
Medium USN-7915-1 3 CVEs

radare2 vulnerabilities

Published Dec 8, 2025 · Updated Aug 31, 2026

Summary

It was discovered that Radare2 contained several memory leaks. An attacker
could possibly use these issues to cause a denial of service.

Fixed packages 4

ReleasePackageFixed in
Ubuntu · 25.10 radare2 5.9.8+dfsg-2ubuntu0.25.10.2
Ubuntu · Pro 18.04 LTS Pro:18.04:LTS radare2 2.3.0+dfsg-2ubuntu0.1~esm1
Ubuntu · Pro 20.04 LTS Pro:20.04:LTS radare2 4.2.1+dfsg-2ubuntu0.1~esm1
Ubuntu · Pro 24.04 LTS Pro:24.04:LTS radare2 5.5.0+dfsg-1.1ubuntu3+esm1

Vulnerabilities 3

  • Medium 5.5

    radare2 v5.9.8 and before contains a memory leak in the function r_bin_object_new.

  • Medium 5.5

    radare2 v5.9.8 and before contains a memory leak in the function r2r_subprocess_init.

  • Low 3.3

    radare2 v5.9.8 and before contains a memory leak in the function bochs_open.

References

  • report
    https://ubuntu.com/security/CVE-2025-60359
  • report
    https://ubuntu.com/security/CVE-2025-60360
  • report
    https://ubuntu.com/security/CVE-2025-60361