MEDIUM Published November 14, 2025

CVE-2025-63744

A NULL pointer dereference vulnerability was discovered in radare2 6.0.5 and earlier within the load() function of bin_dyldcache.c. Processing a crafted file can cause a segmentation fault and crash the program.

CVSS base score

4.3 (v3.1)

Severity

MEDIUM

Attack vector

Network

Weakness

CWE-476

Last modified

November 5, 2026

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Affected products

radare radare2

References

github.com Patch, Third Party Advisory
github.com Patch, Third Party Advisory
github.com Patch
github.com Issue Tracking

View full NVD advisory →

More radare vulnerabilities

Published the same day

← Back to CVE watch

CVE-2025-63744

Affected products

References

More radare vulnerabilities

Published the same day

Related reading