CVE-2022-1714

Out-of-bounds Read in GitHub repository radareorg/radare2 prior to 5.7.0. The bug causes the program reads data past the end of the intented buffer. Typically, this can allow attackers to read sensitive information from other memory locations or cause a crash.

CVSS v3.1

7.1 HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

CVSS v3.0

7.9 HIGHCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:L

CVSS v2.0

3.6 LOWAV:L/AC:L/Au:N/C:P/I:N/A:P

EPSS

0.43% chance of exploitation in the next 30 days, 36th percentile

Published

2022-05-13

Updated

2024-08-03

Proof-of-concept exploits (1)

• https://huntr.dev/bounties/1c22055b-b015-47a8-a57b-4982978751d0

References

• CVE Record
• NVD entry

Related

• CVE-2022-1713
• CVE-2022-1715
• CVE-2022-1712
• CVE-2022-1716
• CVE-2022-1711
• CVE-2022-1717