CVE-2022-1437mediumCWE-122

CVE-2022-1437: medium-severity vulnerability in radareorg/radare2

Heap-based Buffer Overflow in radareorg/radare2

Published · Updated

Follow this CVE+ Monitor radareorg/radare2+ Monitor radare2

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 5.3epss 0.8%
Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.7.0. The bug causes the program reads data past the end of the intented buffer. Typically, this can allow attackers to read sensitive information from other memory locations or cause a crash.
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Affected products
radareorg · radareorg/radare2
Related CVEs — radareorg/radare2

In the same product, most dangerous first.

CVE-2022-1899HIGHOut-of-bounds Read in radareorg/radare2EPSS 1.5%CVE-2022-0559HIGHUse After Free in radareorg/radare2EPSS 1.3%CVE-2022-0139HIGHUse After Free in radareorg/radare2EPSS 1.2%CVE-2022-0676HIGHHeap-based Buffer Overflow in radareorg/radare2EPSS 1.2%CVE-2022-0520HIGHUse After Free in radareorg/radare2EPSS 1.1%CVE-2022-0173CRITICALOut-of-bounds Read in radareorg/radare2EPSS 1.1%