CVE-2022-1383

Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.6.8. The bug causes the program reads data past the end of the intented buffer. Typically, this can allow attackers to read sensitive information from other memory locations or cause a crash.

CVSS v3.1

6.1 MEDIUMCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H

CVSS v3.0

4.8 MEDIUMCVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L

CVSS v2.0

5.8 MEDIUMAV:N/AC:M/Au:N/C:P/I:N/A:P

EPSS

0.74% chance of exploitation in the next 30 days, 52th percentile

Published

2022-04-17

Updated

2024-08-03

Proof-of-concept exploits (1)

• https://huntr.dev/bounties/02b4b563-b946-4343-9092-38d1c5cd60c9

References

• CVE Record
• NVD entry

Related

• CVE-2022-1382
• CVE-2022-1386
• CVE-2022-1381
• CVE-2022-1387
• CVE-2022-1380
• CVE-2022-1388