Description
Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.6.8. The bug causes the program reads data past the end of the intented buffer. Typically, this can allow attackers to read sensitive information from other memory locations or cause a crash.
References (2)
Core 2
Core References
Exploit, Patch, Third Party Advisory x_refsource_confirm
https://huntr.dev/bounties/02b4b563-b946-4343-9092-38d1c5cd60c9
Patch, Third Party Advisory x_refsource_misc
https://github.com/radareorg/radare2/commit/1dd65336f0f0c351d6ea853efcf73cf9c0030862
Scores
CVSS v3
6.1
EPSS
0.0072
EPSS Percentile
49.1%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H
Details
CWE
CWE-122
CWE-787
Status
published
Products (1)
radare/radare2
< 5.6.8
Published
Apr 18, 2022
Tracked Since
Feb 18, 2026