Heap Buffer Overflow in Radare2 by Radareorg
CVE-2022-28069

7.5HIGH

Key Information:

Vendor

Radare

Status
Radare2
Vendor
CVE Published:
22 August 2023

What is CVE-2022-28069?

A heap buffer overflow vulnerability has been identified in the vax_opfunction of Radare2 versions 5.4.0 and 5.4.2. This flaw can potentially be exploited by an attacker to manipulate memory allocations, leading to unexpected behavior, crashes, or even arbitrary code execution, thus posing significant risks to the integrity and confidentiality of user data.

References

https://github.com/radareorg/radare2/commit/49b0cebfdf0db...

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.