CVE-2025-63745: Radare RADARE2

Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days.

A NULL pointer dereference vulnerability was discovered in radare2 6.0.5 and earlier within the info() function of bin_ne.c. A crafted binary input can trigger a segmentation fault, leading to a denial of service when the tool processes malformed data.

Affected products

• Radare RADARE2: up to and including 6.0.5

Published 2025-11-14. Last modified 2026-06-17.