CVE-2025-1378

A vulnerability, which was classified as problematic, was found in radare2 5.9.9 33286. Affected is an unknown function in the library /libr/main/rasm2.c of the component rasm2. The manipulation leads to memory corruption. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. Upgrading to version 6.0.0 is able to address this issue. The patch is identified as c6c772d2eab692ce7ada5a4227afd50c355ad545. It is recommended to upgrade the affected component.

• CWE-119

• https://github.com/radareorg/radare2/commit/c6c772d2eab692ce7ada5a4227afd50c355ad545Patch
• https://github.com/radareorg/radare2/issues/23953Exploit, Issue Tracking, Vendor Advisory
• https://github.com/radareorg/radare2/issues/23953#issue-2844325926Exploit, Issue Tracking, Vendor Advisory
• https://github.com/radareorg/radare2/milestone/86Release Notes
• https://vuldb.com/?ctiid.295986Permissions Required, VDB Entry
• https://vuldb.com/?id.295986Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.498499Third Party Advisory, VDB Entry

Published

Feb 17, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-13773The Print Invoice & Delivery Notes for WooCommerce plugin fo…9.8
• CVE-2025-13774A vulnerability exists in Progress Flowmon ADS versions prio…8.8
• CVE-2025-13776Multiple Finka programs use hard-coded Firebird database cre…7.1
• CVE-2025-13777Authentication bypass by capture-replay vulnerability in ABB…8.3
• CVE-2025-13778Missing authentication for critical function vulnerability i…7.1
• CVE-2025-13779Missing authentication for critical function vulnerability i…8.3
• CVE-2025-13780pgAdmin versions up to 9.10 are affected by a Remote Code Ex…8.8
• CVE-2025-13781GitLab has remediated an issue in GitLab EE affecting all ve…6.5
• CVE-2025-13782A vulnerability was identified in taosir WTCMS up to 01a5f68…9.8
• CVE-2025-13783A security flaw has been discovered in taosir WTCMS up to 01…9.8
• CVE-2025-13784A weakness has been identified in yungifez Skuul School Mana…4.8
• CVE-2025-13785A security vulnerability has been detected in yungifez Skuul…6.5