CVE-2022-0713 - Heap-based Buffer Overflow in radareorg/radare2

HIGH

Heap-based Buffer Overflow in radareorg/radare2

Published Feb 22, 2022

7.1

HIGH

CVSS 3.1

EPSS 0.97%

Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.6.4.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

Version	Status	Constraints
unspecified	affected	<5.6.4

No remediation recorded yet.

Weaknesses (2)

CWE-122

CWE-787

Out-of-bounds Write

Link	Providers	Tags
https://github.com/radareorg/radare2/commit/a35f89f86ed12161af09330e92e5a213014e46a1		x_refsource_MISCPatchThird Party Advisory
https://huntr.dev/bounties/d35b3dff-768d-4a09-a742-c18ca8f56d3c		x_refsource_CONFIRMExploitPatchThird Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BZTIMAS53YT66FUS4QHQAFRJOBMUFG6D/		vendor-advisoryx_refsource_FEDORA
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/E6YBRQ3UCFWJVSOYIKPVUDASZ544TFND/		vendor-advisoryx_refsource_FEDORA