CVE-2022-1237

Published: Apr 6, 2022Modified: Nov 21, 2024

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

Improper Validation of Array Index in GitHub repository radareorg/radare2 prior to 5.6.8. This vulnerability is heap overflow and may be exploitable. For more general description of heap buffer overflow, see [CWE](https://cwe.mitre.org/data/definitions/122.html).

Affected (1)

Products: Radare: Radare2

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Radare Radare2	Before 5.6.8

Related CWEs

Improper Validation of Array Index

The product uses untrusted input when calculating or using an array index, but the product does not validate or incorrectly validates the index to ensure the index references a valid position within the array.

References (4)

https://github.com/radareorg/radare2/commit/2d782cdaa2112c10b8dd5e7a93c134b2ada9c1a6

Source: security@huntr.dev

PatchThird Party Advisory

https://huntr.dev/bounties/ad3c9c4c-76e7-40c8-bd4a-c095acd8bb40

Source: security@huntr.dev

ExploitThird Party Advisory

https://github.com/radareorg/radare2/commit/2d782cdaa2112c10b8dd5e7a93c134b2ada9c1a6

Source: af854a3a-2127-422b-91ae-364da2661108

PatchThird Party Advisory

https://huntr.dev/bounties/ad3c9c4c-76e7-40c8-bd4a-c095acd8bb40

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party Advisory

Timeline

No history available yet.