CVE-2025-1864: Radare RADARE2

Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days.

Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in radareorg radare2 allows Overflow Buffers.This issue affects radare2: before <5.9.9.

Affected products

• Radare RADARE2: up to and including 5.9.8

Published 2025-03-03. Last modified 2026-06-17.