CVE-2022-1452 — Out-of-bounds Read in Radare2
Severity
7.1HIGHNVD
EPSS
0.3%
top 48.93%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedApr 24
Latest updateAug 3
Description
Out-of-bounds Read in r_bin_java_bootstrap_methods_attr_new function in GitHub repository radareorg/radare2 prior to 5.7.0. The bug causes the program reads data past the end 2f the intented buffer. Typically, this can allow attackers to read sensitive information from other memory locations or cause a crash. More details see [CWE-125: Out-of-bounds read](https://cwe.mitre.org/data/definitions/125.html).
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:HExploitability: 1.8 | Impact: 5.2
Affected Packages3 packages
Patches
🔴Vulnerability Details
2GHSA▶
GHSA-9xr8-fpxg-qjhf: Out-of-bounds Read in r_bin_java_bootstrap_methods_attr_new function in GitHub repository radareorg/radare2 prior to 5↗2022-04-25
OSV▶
CVE-2022-1452: Out-of-bounds Read in r_bin_java_bootstrap_methods_attr_new function in GitHub repository radareorg/radare2 prior to 5↗2022-04-24
📋Vendor Advisories
1Debian▶
CVE-2022-1452: radare2 - Out-of-bounds Read in r_bin_java_bootstrap_methods_attr_new function in GitHub r...↗2022
🕵️Threat Intelligence
3Talos▶
Vulnerability Spotlight: Vulnerabilities in Alyac antivirus program could stop virus scanning, cause code execution↗2022-08-03
Talos▶
Vulnerability Spotlight: Vulnerability in Alyac antivirus program could stop virus scanning, cause denial of service↗2022-05-10
Talos▶
Vulnerability Spotlight: Vulnerability in Alyac antivirus program could stop virus scanning, cause denial of service↗2022-05-10