Format string vulnerability in the raydium_log function in console.c in Raydium before…
Priority LOW 23CWE-134Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- None
- User interaction
- — Not recorded in CVSS 2.0
- Attack complexity
- Low
- Impact type
- Code execution
- Confidentiality · integrity · availability
- Partial · Partial · Partial
- Fix status
- No fix listed
Attack profile from CVSS 2.0 · NVD. Fix status from CNA. Impact type from CWE-134 and the CVSS impact.
Summary
Format string vulnerability in the raydium_log function in console.c in Raydium before SVN revision 310 allows local users to execute arbitrary code via format string specifiers in the format parameter, which are not properly handled in a call to raydium_console_line_add.
Why it matters now
EPSS 0.00915 60th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 27
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:raydium:raydium:svn_revision_283:*:*:*:*:*:*:* | svn_revision_283 | Vulnerable | Raydium |
| cpe:2.3:a:raydium:raydium:svn_revision_284:*:*:*:*:*:*:* | svn_revision_284 | Vulnerable | Raydium |
| cpe:2.3:a:raydium:raydium:svn_revision_285:*:*:*:*:*:*:* | svn_revision_285 | Vulnerable | Raydium |
| cpe:2.3:a:raydium:raydium:svn_revision_286:*:*:*:*:*:*:* | svn_revision_286 | Vulnerable | Raydium |
| cpe:2.3:a:raydium:raydium:svn_revision_287:*:*:*:*:*:*:* | svn_revision_287 | Vulnerable | Raydium |
| cpe:2.3:a:raydium:raydium:svn_revision_288:*:*:*:*:*:*:* | svn_revision_288 | Vulnerable | Raydium |
| cpe:2.3:a:raydium:raydium:svn_revision_289:*:*:*:*:*:*:* | svn_revision_289 | Vulnerable | Raydium |
| cpe:2.3:a:raydium:raydium:svn_revision_290:*:*:*:*:*:*:* | svn_revision_290 | Vulnerable | Raydium |
| cpe:2.3:a:raydium:raydium:svn_revision_291:*:*:*:*:*:*:* | svn_revision_291 | Vulnerable | Raydium |
| cpe:2.3:a:raydium:raydium:svn_revision_292:*:*:*:*:*:*:* | svn_revision_292 | Vulnerable | Raydium |
- cpe:2.3:a:raydium:raydium:svn_revision_283:*:*:*:*:*:*:* Versions svn_revision_283 Vulnerable ·Raydium
- cpe:2.3:a:raydium:raydium:svn_revision_284:*:*:*:*:*:*:* Versions svn_revision_284 Vulnerable ·Raydium
- cpe:2.3:a:raydium:raydium:svn_revision_285:*:*:*:*:*:*:* Versions svn_revision_285 Vulnerable ·Raydium
- cpe:2.3:a:raydium:raydium:svn_revision_286:*:*:*:*:*:*:* Versions svn_revision_286 Vulnerable ·Raydium
- cpe:2.3:a:raydium:raydium:svn_revision_287:*:*:*:*:*:*:* Versions svn_revision_287 Vulnerable ·Raydium
- cpe:2.3:a:raydium:raydium:svn_revision_288:*:*:*:*:*:*:* Versions svn_revision_288 Vulnerable ·Raydium
- cpe:2.3:a:raydium:raydium:svn_revision_289:*:*:*:*:*:*:* Versions svn_revision_289 Vulnerable ·Raydium
- cpe:2.3:a:raydium:raydium:svn_revision_290:*:*:*:*:*:*:* Versions svn_revision_290 Vulnerable ·Raydium
- cpe:2.3:a:raydium:raydium:svn_revision_291:*:*:*:*:*:*:* Versions svn_revision_291 Vulnerable ·Raydium
- cpe:2.3:a:raydium:raydium:svn_revision_292:*:*:*:*:*:*:* Versions svn_revision_292 Vulnerable ·Raydium
Show 17 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:raydium:raydium:svn_revision_293:*:*:*:*:*:*:* | svn_revision_293 | Vulnerable | Raydium |
| cpe:2.3:a:raydium:raydium:svn_revision_294:*:*:*:*:*:*:* | svn_revision_294 | Vulnerable | Raydium |
| cpe:2.3:a:raydium:raydium:svn_revision_295:*:*:*:*:*:*:* | svn_revision_295 | Vulnerable | Raydium |
| cpe:2.3:a:raydium:raydium:svn_revision_296:*:*:*:*:*:*:* | svn_revision_296 | Vulnerable | Raydium |
| cpe:2.3:a:raydium:raydium:svn_revision_297:*:*:*:*:*:*:* | svn_revision_297 | Vulnerable | Raydium |
| cpe:2.3:a:raydium:raydium:svn_revision_298:*:*:*:*:*:*:* | svn_revision_298 | Vulnerable | Raydium |
| cpe:2.3:a:raydium:raydium:svn_revision_299:*:*:*:*:*:*:* | svn_revision_299 | Vulnerable | Raydium |
| cpe:2.3:a:raydium:raydium:svn_revision_300:*:*:*:*:*:*:* | svn_revision_300 | Vulnerable | Raydium |
| cpe:2.3:a:raydium:raydium:svn_revision_301:*:*:*:*:*:*:* | svn_revision_301 | Vulnerable | Raydium |
| cpe:2.3:a:raydium:raydium:svn_revision_302:*:*:*:*:*:*:* | svn_revision_302 | Vulnerable | Raydium |
| cpe:2.3:a:raydium:raydium:svn_revision_303:*:*:*:*:*:*:* | svn_revision_303 | Vulnerable | Raydium |
| cpe:2.3:a:raydium:raydium:svn_revision_304:*:*:*:*:*:*:* | svn_revision_304 | Vulnerable | Raydium |
| cpe:2.3:a:raydium:raydium:svn_revision_305:*:*:*:*:*:*:* | svn_revision_305 | Vulnerable | Raydium |
| cpe:2.3:a:raydium:raydium:svn_revision_306:*:*:*:*:*:*:* | svn_revision_306 | Vulnerable | Raydium |
| cpe:2.3:a:raydium:raydium:svn_revision_307:*:*:*:*:*:*:* | svn_revision_307 | Vulnerable | Raydium |
| cpe:2.3:a:raydium:raydium:svn_revision_308:*:*:*:*:*:*:* | svn_revision_308 | Vulnerable | Raydium |
| cpe:2.3:a:raydium:raydium:svn_revision_309:*:*:*:*:*:*:* | svn_revision_309 | Vulnerable | Raydium |
- cpe:2.3:a:raydium:raydium:svn_revision_293:*:*:*:*:*:*:* Versions svn_revision_293 Vulnerable ·Raydium
- cpe:2.3:a:raydium:raydium:svn_revision_294:*:*:*:*:*:*:* Versions svn_revision_294 Vulnerable ·Raydium
- cpe:2.3:a:raydium:raydium:svn_revision_295:*:*:*:*:*:*:* Versions svn_revision_295 Vulnerable ·Raydium
- cpe:2.3:a:raydium:raydium:svn_revision_296:*:*:*:*:*:*:* Versions svn_revision_296 Vulnerable ·Raydium
- cpe:2.3:a:raydium:raydium:svn_revision_297:*:*:*:*:*:*:* Versions svn_revision_297 Vulnerable ·Raydium
- cpe:2.3:a:raydium:raydium:svn_revision_298:*:*:*:*:*:*:* Versions svn_revision_298 Vulnerable ·Raydium
- cpe:2.3:a:raydium:raydium:svn_revision_299:*:*:*:*:*:*:* Versions svn_revision_299 Vulnerable ·Raydium
- cpe:2.3:a:raydium:raydium:svn_revision_300:*:*:*:*:*:*:* Versions svn_revision_300 Vulnerable ·Raydium
- cpe:2.3:a:raydium:raydium:svn_revision_301:*:*:*:*:*:*:* Versions svn_revision_301 Vulnerable ·Raydium
- cpe:2.3:a:raydium:raydium:svn_revision_302:*:*:*:*:*:*:* Versions svn_revision_302 Vulnerable ·Raydium
- cpe:2.3:a:raydium:raydium:svn_revision_303:*:*:*:*:*:*:* Versions svn_revision_303 Vulnerable ·Raydium
- cpe:2.3:a:raydium:raydium:svn_revision_304:*:*:*:*:*:*:* Versions svn_revision_304 Vulnerable ·Raydium
- cpe:2.3:a:raydium:raydium:svn_revision_305:*:*:*:*:*:*:* Versions svn_revision_305 Vulnerable ·Raydium
- cpe:2.3:a:raydium:raydium:svn_revision_306:*:*:*:*:*:*:* Versions svn_revision_306 Vulnerable ·Raydium
- cpe:2.3:a:raydium:raydium:svn_revision_307:*:*:*:*:*:*:* Versions svn_revision_307 Vulnerable ·Raydium
- cpe:2.3:a:raydium:raydium:svn_revision_308:*:*:*:*:*:*:* Versions svn_revision_308 Vulnerable ·Raydium
- cpe:2.3:a:raydium:raydium:svn_revision_309:*:*:*:*:*:*:* Versions svn_revision_309 Vulnerable ·Raydium
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2006-2409
- 2026-10-03 Alias added: GHSA-233m-mr87-rr74
References
More Raydium vulnerabilities
- TI-2006-02347 Buffer overflow in raydium_network_read function in network.c in Raydium SVN revision 312… CVSS 2.0HIGH 7.5
- TI-2006-02344 Multiple buffer overflows in Raydium before SVN revision 310 allow remote attackers to… CVSS 2.0HIGH 7.5
- TI-2006-02348 The raydium_network_read function in network.c in Raydium SVN revision 312 and earlier… CVSS 2.0MEDIUM 5.0
- TI-2006-02346 raydium_network_netcall_exec function in network.c in Raydium SVN revision 312 and… CVSS 2.0MEDIUM 5.0
Sources
- CVE-2006-2409 · CVE Program
- CVE-2006-2409 · NVD
- FIRST EPSS
- GHSA-233m-mr87-rr74 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences