CVE-2022-1237

Improper Validation of Array Index in GitHub repository radareorg/radare2 prior to 5.6.8. This vulnerability is heap overflow and may be exploitable. For more general description of heap buffer overflow, see [CWE](https://cwe.mitre.org/data/definitions/122.html).

Score

CVSS 3.1 7.8 High

Status

Modified - security@huntr.dev

Published

2022-04-06

Last modified

2024-08-02

Weaknesses

CWE-129

Affected products

• Radare2 (Radare)
• Radareorgradare2 (Radareorg)

References

• https://github.com/radareorg/radare2/commit/2d782cdaa2112c10b8dd5e7a93c134b2ada9c1a6
• https://huntr.dev/bounties/ad3c9c4c-76e7-40c8-bd4a-c095acd8bb40