CVE-2022-1052 - Heap Buffer Overflow in iterate_chained_fixups in radareorg/radare2

MEDIUM

Heap Buffer Overflow in iterate_chained_fixups in radareorg/radare2

Published Mar 24, 2022

5.5

MEDIUM

CVSS 3.1

EPSS 0.42%

Heap Buffer Overflow in iterate_chained_fixups in GitHub repository radareorg/radare2 prior to 5.6.6.

Vendor Radareorg Product Radareorg/radare2 Default
unknown
Affected
- ≥ unspecified, < 5.6.6

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
Radareorg	Radareorg/radare2	unknown	Affected ≥ unspecified, < 5.6.6

No remediation recorded yet.

Weaknesses (2)

CWE-122

CWE-787

Out-of-bounds Write

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-24399		Advisory
https://github.com/radareorg/radare2/commit/0052500c1ed5bf8263b26b9fd7773dbdc6f170c4		x_refsource_MISCPatchThird Party Advisory
https://huntr.dev/bounties/3b3b7f77-ab8d-4de3-999b-eeec0a3eebe7		x_refsource_CONFIRMExploitThird Party Advisory

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner @huntrdev

Published Mar 24, 2022

Updated Aug 2, 2024

Reserved Mar 22, 2022

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Red Hat

No data

ENISA EUVD

Assigner @huntrdev

Published Mar 24, 2022

Updated Aug 2, 2024

GitHub

No data