CVE-2025-5643

CVE-2025-5643 describes a problematic memory corruption vulnerability in Radare2 versions up to 5.9.9, specifically within the radiff2 component's cons_stack_load function when processing the -T argument. This vulnerability has a low severity CVSS score of 2.5, requiring local access and possessing high attack complexity with a difficult exploitation path, leading to a potential low impact on availability. While a public exploit exists, its real-world existence is doubted, and there is no evidence of active exploitation, Metasploit, Nuclei, or ExploitDB modules, nor significant community discussion or media coverage.