CVE-2022-1283CWE-476
NULL Pointer Dereference in r_bin_ne_get_entrypoints function in radareorg/radare2
Medium · published April 8, 2022
What it is
NULL Pointer Dereference in r_bin_ne_get_entrypoints function in GitHub repository radareorg/radare2 prior to 5.6.8. This vulnerability allows attackers to cause a denial of service (application crash).
The record
Technical detail
- CVSS v3.0
- 6.6 · MEDIUM
- Vector
- CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H
- CVSS v4.0
- Not supplied
- EPSS
- 0.00679 · 51.8th percentile
- Weakness
- CWE-476 · NULL Pointer Dereference
- Published
- 2022-04-08T17:55Z
EPSS history
Timeline