CVE-2022-1383 - Heap-based Buffer Overflow in radareorg/radare2

Back Back to CVE browser

MEDIUM

Heap-based Buffer Overflow in radareorg/radare2

Published Apr 17, 2022

6.1

MEDIUM

CVSS 3.1

EPSS 0.75%

Description

Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.6.8. The bug causes the program reads data past the end of the intented buffer. Typically, this can allow attackers to read sensitive information from other memory locations or cause a crash.

Affected products

Vendor Radareorg Product Radareorg/radare2 Default
n/a
- Version
  unspecified
  Status
  affected
  Constraints
  <5.6.8

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Radareorg

Radareorg/radare2

n/a

Version	Status	Constraints
unspecified	affected	<5.6.8

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-122

CWE-787

Out-of-bounds Write

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-24702
Advisory
https://github.com/radareorg/radare2/commit/1dd65336f0f0c351d6ea853efcf73cf9c0030862
x_refsource_MISCPatchThird Party Advisory
https://huntr.dev/bounties/02b4b563-b946-4343-9092-38d1c5cd60c9
x_refsource_CONFIRMExploitPatchThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-24702		Advisory
https://github.com/radareorg/radare2/commit/1dd65336f0f0c351d6ea853efcf73cf9c0030862		x_refsource_MISCPatchThird Party Advisory
https://huntr.dev/bounties/02b4b563-b946-4343-9092-38d1c5cd60c9		x_refsource_CONFIRMExploitPatchThird Party Advisory