Heap-based Buffer Overflow in radareorg/radare2
CVE-2022-1383

4.8MEDIUM

Key Information:

Vendor

Radareorg

Status
Radareorg/radare2
Vendor
CVE Published:
18 April 2022

What is CVE-2022-1383?

Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.6.8. The bug causes the program reads data past the end of the intented buffer. Typically, this can allow attackers to read sensitive information from other memory locations or cause a crash.

Affected Version(s)

radareorg/radare2 < 5.6.8

References

https://huntr.dev/bounties/02b4b563-b946-4343-9092-38d1c5...
x_refsource_CONFIRM
https://github.com/radareorg/radare2/commit/1dd65336f0f0c...
x_refsource_MISC

CVSS V3.1

Score:
4.8
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.