First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2025-1744

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Out-of-bounds Write vulnerability in radareorg radare2 allows

heap-based buffer over-read or buffer overflow.This issue affects radare2: before <5.9.9.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

Affected software

Vendor	Product	Versions
radareorg	radare2	< <5.9.9

References

https://github.com/radareorg/radare2/pull/23969Issue Tracking, Patch, Vendor Advisory

Timeline

Published: Feb 28, 2025
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-17454.3A vulnerability has been found in LinZhaoguan pb-cms 2.0 and classified as problematic. This vulnerability affects unknown code of the compo CVE-2025-17466.1Cross-Site Scripting vulnerability in OpenCart versions prior to 4.1.0. This vulnerability allows an attacker to execute JavaScript code in CVE-2025-17474.7HTML injection vulnerabilities in OpenCart versions prior to 4.1.0. These vulnerabilities could allow an attacker to modify the HTML of the CVE-2025-17484.7HTML injection vulnerabilities in OpenCart versions prior to 4.1.0. These vulnerabilities could allow an attacker to modify the HTML of the CVE-2025-17494.7HTML injection vulnerabilities in OpenCart versions prior to 4.1.0. These vulnerabilities could allow an attacker to modify the HTML of the CVE-2025-17509.8An SQL injection vulnerability exists in the delete function of DuckDBVectorStore in run-llama/llama_index version v0.12.19. This vulnerabil CVE-2025-17519.8A SQL Injection vulnerability has been found in Ciges 2.15.5 from ATISoluciones. This vulnerability allows an attacker to retrieve, create, CVE-2025-17527.5A Denial of Service (DoS) vulnerability has been identified in the KnowledgeBaseWebReader class of the run-llama/llama_index project, affect CVE-2025-17537.8LLama-Index CLI version v0.12.20 contains an OS command injection vulnerability. The vulnerability arises from the improper handling of the CVE-2025-17545.3An issue has been discovered in GitLab CE/EE affecting all versions from 17.2 before 17.11.5, 18.0 before 18.0.3, and 18.1 before 18.1.1 tha CVE-2025-17557.8MongoDB Compass may be susceptible to local privilege escalation under certain conditions potentially enabling unauthorized actions on a use CVE-2025-17567.8mongosh may be susceptible to local privilege escalation under certain conditions potentially enabling unauthorized actions on a user's syst

CVE-2025-1744: Critical severity, CVSS 9.8 | Vulnix