OSV-2025-50

See a problem?
Import Source
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/radare2/OSV-2025-50.yaml
JSON Data
https://api.osv.dev/v1/vulns/OSV-2025-50
Withdrawn
2025-11-28T19:13:26.835996Z
Published
2025-01-20T00:16:43.389094Z
Modified
2025-01-20T00:16:43.389604Z
Summary
Heap-double-free in r_crbtree_free
Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=390503425

Crash type: Heap-double-free
Crash state:
r_crbtree_free
r_bin_object_free
r_bin_file_free
References

Affected packages

OSS-Fuzz / radare2

Package

Name
radare2
Purl
pkg:generic/radare2

Affected ranges

Type
GIT
Repo
https://github.com/radareorg/radare2
Events
Introduced
d6cd906585b7c01c41b111dde0e0477945954646
Fixed
28c7c2d593a024e8b30eaa56abc6b52158a09842

Ecosystem specific 

{
    "severity": "HIGH"
}

Database specific

fixed_range 
"9ea3e3491f0528ccc41a0ce869b5bf0b0685f0da:28c7c2d593a024e8b30eaa56abc6b52158a09842"
source 
"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/radare2/OSV-2025-50.yaml"
introduced_range 
"b7d2fec2f732bffc4093d09485e9855c84201bc8:e798bd4482971a0d2aed211c551876f90e5ea411"