CVE-2025-5648

A vulnerability was found in Radare2 5.9.9. It has been classified as problematic. Affected is the function r_cons_pal_init in the library /libr/cons/pal.c of the component radiff2. The manipulation of the argument -T leads to memory corruption. An attack has to be approached locally. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. The real existence of this vulnerability is still doubted at the moment. The name of the patch is 5705d99cc1f23f36f9a84aab26d1724010b97798. It is recommended to apply a patch to fix this issue. The documentation explains that the parameter -T is experimental and "crashy". Further analysis has shown "the race is not a real problem unless you use asan". A new warning has been added.

• CWE-119

• https://drive.google.com/file/d/1StQvpouGzMCOGmF3b5q_NxAJiZwivnjp/view?usp=sharingExploit
• https://github.com/radareorg/radare2/commit/5705d99cc1f23f36f9a84aab26d1724010b97798Patch
• https://github.com/radareorg/radare2/issues/24238Exploit, Issue Tracking, Vendor Advisory
• https://github.com/radareorg/radare2/issues/24238#issuecomment-2918850876Issue Tracking, Vendor Advisory
• https://vuldb.com/?ctiid.311136Permissions Required, VDB Entry
• https://vuldb.com/?id.311136Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.586929Third Party Advisory, VDB Entry
• https://github.com/radareorg/radare2/issues/24238#issuecomment-2918850876Issue Tracking, Vendor Advisory

Published

Jun 5, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-56451Cross site scripting vulnerability in seeyon Zhiyuan A8+ Col…6.1
• CVE-2025-5646A vulnerability has been found in Radare2 5.9.9 and classifi…2.5
• CVE-2025-56463Mercusys MW305R 3.30 and below is has a Transport Layer Secu…6.8
• CVE-2025-56466Hardcoded credentials in Dietly v1.25.0 for android allows a…7.5
• CVE-2025-56467An issue was discovered in AXIS BANK LIMITED Axis Mobile App…6.5
• CVE-2025-5647A vulnerability was found in Radare2 5.9.9 and classified as…2.5
• CVE-2025-5649A vulnerability classified as critical has been found in Sou…6.5
• CVE-2025-56498An OS command injection vulnerability exists in PLDT WiFi Ro…5.3
• CVE-2025-56499Incorrect access control in mihomo v1.19.11 allows authentic…6.5
• CVE-2025-5650A vulnerability classified as critical was found in 1000proj…9.8
• CVE-2025-56503An issue in Sublime HQ Pty Ltd Sublime Text 4 4200 allows au…6.5
• CVE-2025-5651A vulnerability, which was classified as problematic, has be…5.4