CVE-2022-1714: high-severity vulnerability in radareorg/radare2
Out-of-bounds Read in radareorg/radare2
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 7.9epss 0.4%
Out-of-bounds Read in GitHub repository radareorg/radare2 prior to 5.7.0. The bug causes the program reads data past the end of the intented buffer. Typically, this can allow attackers to read sensitive information from other memory locations or cause a crash.
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:L
Affected products
radareorg · radareorg/radare2Related CVEs — radareorg/radare2
In the same product, most dangerous first.
CVE-2022-1899HIGHOut-of-bounds Read in radareorg/radare2EPSS 1.5%CVE-2022-0559HIGHUse After Free in radareorg/radare2EPSS 1.3%CVE-2022-0139HIGHUse After Free in radareorg/radare2EPSS 1.2%CVE-2022-0676HIGHHeap-based Buffer Overflow in radareorg/radare2EPSS 1.2%CVE-2022-0520HIGHUse After Free in radareorg/radare2EPSS 1.1%CVE-2022-0173CRITICALOut-of-bounds Read in radareorg/radare2EPSS 1.1%