关键漏洞信息 漏洞标题 radare2: NULL Pointer Dereference in (bin_dyldcache.c) Leads to Denial of Service 基本信息 CVE ID: (Pending MITRE Assignment) Reported: 2025-10-07 Published: 2025-10-08 Fixed: 2025-10-08 Severity: Low (Denial of Service) CWE: CWE-476: NULL Pointer Dereference Discovered by: Vlatko Kosturjak of Marlink Cyber 漏洞概述 A NULL pointer dereference vulnerability exists in radare2 within the function of . Processing a crafted file can cause a segmentation fault and crash the program. To exploit the vulnerability, someone must open a crafted binary file. This could impact automated binary analysis environments or pipelines that rely on radare2. 受影响版本 Patched in: Commit referencing fix on GitHub 技术细节 The crash occurs when attempts to access a field through a NULL pointer of type . ASAN reports a segmentation fault at . 影响 Impact: Denial of Service (crash) Attack Vector: Local / crafted input Privileges Required: None User Interaction: Required CVSS v3.1 Base Score: 5.5 Vector: AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H 修复 The patch adds checks to ensure the pointer to RIODesc is valid before dereferencing it. Fixed in commit e37e15d10fd8a19