CVE-2025-1378

radare2: This update for radare2 fixes the following issues: - CVE-2025-1378: Fixed memory corruption (boo#1237250) https:...

CVE-2025-1378 is fixed in radare2 on 1 platform by OPENSUSE-SU-2025:0072-1 (version 5.9.8-bp156.4.6.1), released February 21, 2025. It is not reported as exploited. Patch Radar priority: Routine.

Routine
CVSS
n/a
No vendor severity
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0032
24th percentile

This update for radare2 fixes the following issues: - CVE-2025-1378: Fixed memory corruption (boo#1237250) https://github.com/radareorg/radare2/releases/tag/5.9.0 Update to version 5.8.8: For details, check full release notes * Faster analysis, type matching, binary parsing (2-4x) * Add assembler for riscv and disassemblers for PDP11, Alpha64 and armv7.v35 * Improved integration with r2frida remote filesystems * Cleaning debugger for windows (32 and 64) and macOS makes it more reliable and stable * Better build scripts for Windows (add asan and w32 profiles) * AES key wrap algorithm support in rahash2 * Print and convert ternary values back and forth - Update to 4.5.0 * Fix build of the onefied shared lib * Enable asm.jmpsub by default * Fix m68k analysis issues * Fix infinite loop bug related to anal.nopskip

Where it's fixed

ProductFixed inFixReleased
Linux
radare2 · opensuse-leap 15.6 5.9.8-bp156.4.6.1 OPENSUSE-SU-2025:0072-1 Feb 21, 2025

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.