CVE-2025-1744 Out-of-bounds Write in radare2
An out-of-bounds write in radare2 allows attackers to cause heap-based buffer overflows, potentially leading to code execution or crashes.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2025-1744?
CVE-2025-1744 is a critical memory corruption vulnerability in Radare Radare2, published on 28 Feb 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Out-of-bounds Write vulnerability in radareorg radare2 allows
heap-based buffer over-read or buffer overflow.This issue affects radare2: before <5.9.9.
Weakness: CWE-787
Which versions are affected by CVE-2025-1744?
It affects 1 product.
Products include Radare Radare2.
How do I fix CVE-2025-1744?
Upgrade to a fixed version.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2025-1744 being exploited?
There is no known exploitation of CVE-2025-1744 in the wild and no public exploit code.
Other vulnerabilities in Radare Radare2
Sources
Also known as AZL-57501, AZL-57512, AZL-57518, AZL-57521, AZL-57524, AZL-57528 and 9 more.