CVE-2022-1714

High

Description

Out-of-bounds Read in GitHub repository radareorg/radare2 prior to 5.7.0. The bug causes the program reads data past the end of the intented buffer. Typically, this can allow attackers to read sensitive information from other memory locations or cause a crash.

SeverityHigh
CVSS7.1
Exploit probability—
ProductRadare2
PublishedMay 13, 2022
First seenMay 13, 2022

How to fix

Update
  • radare radare25.7.0 or later

Affected products

ProductAffected versionsFixed in
radare radare2v < 5.7.05.7.0

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.