CVE-2022-1437CWE-122

Heap-based Buffer Overflow in radareorg/radare2

Medium · published April 22, 2022

CVSS v3.0
5.3
EPSS
1%
Percentile
55.1
In the wild
Unconfirmed
What it is

Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.7.0. The bug causes the program reads data past the end of the intented buffer. Typically, this can allow attackers to read sensitive information from other memory locations or cause a crash.

The record
Technical detail
CVSS v3.0
5.3 · MEDIUM
Vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00769 · 55.1th percentile
Weakness
CWE-122 · Heap-based Buffer Overflow
Published
2022-04-22T14:00Z
EPSS history
Timeline
  • 22 APR 14:00Z
    Heap-based Buffer Overflow in radareorg/radare2
    cvelistv5