p PatchFirst

CVE-2025-60360

CVE-2025-60360

This page contains facts from public vulnerability sources. Check the original advisory before updating.

radare2 v5.9.8 and before contains a memory leak in the function r2r_subprocess_init.

CVSS 5.5 · Medium · EPSS 0.2% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • radare2 Ubuntu:16.04:LTS

    Versions
    • 0.9.6-3.1ubuntu1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • radare2 Ubuntu:Pro:18.04:LTS

    Versions
    • 1.6.0+dfsg-1
    • 2.0.0+dfsg-1
    • 2.1.0+dfsg-1
    • 2.3.0+dfsg-1
    • 2.3.0+dfsg-2
    Affected ranges
    • ECOSYSTEM: < 2.3.0+dfsg-2ubuntu0.1~esm1

    Update to 2.3.0+dfsg-2ubuntu0.1~esm1

  • radare2 Ubuntu:Pro:20.04:LTS

    Versions
    • 3.2.1+dfsg-5build1
    • 4.0.0+dfsg-1
    • 4.2.1+dfsg-1
    • 4.2.1+dfsg-2
    Affected ranges
    • ECOSYSTEM: < 4.2.1+dfsg-2ubuntu0.1~esm1

    Update to 4.2.1+dfsg-2ubuntu0.1~esm1

  • radare2 Ubuntu:Pro:24.04:LTS

    Versions
    • 5.5.0+dfsg-1ubuntu1
    • 5.5.0+dfsg-1.1ubuntu2
    • 5.5.0+dfsg-1.1ubuntu3
    Affected ranges
    • ECOSYSTEM: < 5.5.0+dfsg-1.1ubuntu3+esm1

    Update to 5.5.0+dfsg-1.1ubuntu3+esm1

  • radare2 Ubuntu:25.10

    Versions
    • 5.9.8+dfsg-2
    • 5.9.8+dfsg-2ubuntu0.25.10.1
    Affected ranges
    • ECOSYSTEM: < 5.9.8+dfsg-2ubuntu0.25.10.2

    Update to 5.9.8+dfsg-2ubuntu0.25.10.2

Original sources

Check your server →