CVE-2022-0173: critical vulnerability in radareorg/radare2
Out-of-bounds Read in radareorg/radare2
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
No sign of exploitation. No public exploitation artifact known so far.
radare2 has a flaw that allows reading memory beyond its intended boundaries, potentially exposing sensitive data or causing the program to crash. This occurs when the software processes specially crafted input without proper validation.
Out-of-bounds read vulnerability (CWE-125) in radare2 allows an attacker to read memory outside allocated buffers by providing malformed input. The vulnerability requires local or remote input processing depending on the attack vector, and impacts confidentiality through information disclosure or availability through denial of service.
In the same product, most dangerous first.