CVE Feed

    Dashboard / CVE / CVE-2025-60360

    CVE-2025-60360

    radare2 v5.9.8 and before contains a memory leak in the function r2r_subprocess_init.

    Published:Oct 17, 2025
    Last Modified:Oct 23, 2025
    EPS:Oct 17, 2025
    EPSS Score:0.00014
    CVSS Score:5.5

    Affected Products

    Vendor
    Radare
    Product
    Radare2

    Exploits

    No exploit reference

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2026-14760 (CVSS 1.9) — A weakness has been identified in radareorg radare2 up to 6.1.6. Impacted is the function r_core_seek_arch_bit…
    CVE-2026-14758 (CVSS 1.9) — A vulnerability was identified in radareorg radare2 up to 6.1.6. This vulnerability affects the function cmd_a…
    CVE-2026-14757 (CVSS 1.9) — A vulnerability was determined in radareorg radare2 up to 6.1.6. This affects the function core_anal_bytes of …
    CVE-2026-8696 (CVSS 8.7) — radare2 6.1.5 contains a use-after-free vulnerability in the gdbr_pids_list() function within the GDB client c…
    CVE-2026-8695 (CVSS 8.7) — radare2 6.1.5 contains a use-after-free vulnerability in the gdbr_threads_list() function that allows remote a…
    CVE-2026-6942 (CVSS 9.3) — radare2-mcp version 1.6.0 and earlier contains an os command injection vulnerability that allows remote attack…
    CVE-2026-6941 (CVSS 6.9) — radare2 prior to 6.1.4 contains a path traversal vulnerability in its project notes handling that allows attac…
    CVE-2026-6940 (CVSS 6.9) — radare2 prior to 6.1.4 contains a path traversal vulnerability in project deletion that allows local attackers…
    CVE-2026-40517 (CVSS 8.4) — radare2 prior to 6.1.4 contains a command injection vulnerability in the PDB parser's print_gvars() function t…
    CVE-2026-40527 (CVSS 8.5) — radare2 prior to commit bc5a890 contains a command injection vulnerability in the afsv/afsvj command path wher…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High