CVE-2022-1452CWE-125

Out-of-bounds Read in r_bin_java_bootstrap_methods_attr_new function in radareorg/radare2

High · published April 24, 2022

CVSS v3.0
7.1
EPSS
1%
Percentile
56.5
In the wild
Unconfirmed
What it is

Out-of-bounds Read in r_bin_java_bootstrap_methods_attr_new function in GitHub repository radareorg/radare2 prior to 5.7.0. The bug causes the program reads data past the end 2f the intented buffer. Typically, this can allow attackers to read sensitive information from other memory locations or cause a crash. More details see [CWE-125: Out-of-bounds read](https://cwe.mitre.org/data/definitions/125.html).

The record
Technical detail
CVSS v3.0
7.1 · HIGH
Vector
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00812 · 56.5th percentile
Weakness
CWE-125 · Out-of-bounds Read
Published
2022-04-24T20:50Z
EPSS history
Timeline
  • 24 APR 20:50Z
    Out-of-bounds Read in r_bin_java_bootstrap_methods_attr_new function in radareorg/radare2
    cvelistv5