Vulnerability Description
Out-of-bounds Read in GitHub repository radareorg/radare2 prior to 5.7.0. The bug causes the program reads data past the end of the intented buffer. Typically, this can allow attackers to read sensitive information from other memory locations or cause a crash.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Radare | Radare2 | < 5.7.0 |
Related Weaknesses (CWE)
References
- https://github.com/radareorg/radare2/commit/3ecdbf8e21186a9c5a4d3cfa3b1e9fd27045PatchThird Party Advisory
- https://huntr.dev/bounties/1c22055b-b015-47a8-a57b-4982978751d0ExploitPatchThird Party Advisory
- https://github.com/radareorg/radare2/commit/3ecdbf8e21186a9c5a4d3cfa3b1e9fd27045PatchThird Party Advisory
- https://huntr.dev/bounties/1c22055b-b015-47a8-a57b-4982978751d0ExploitPatchThird Party Advisory
FAQ
What is CVE-2022-1714?
CVE-2022-1714 is a vulnerability with a CVSS score of 7.1 (HIGH). Out-of-bounds Read in GitHub repository radareorg/radare2 prior to 5.7.0. The bug causes the program reads data past the end of the intented buffer. Typically, this can allow attackers to read sensiti...
How severe is CVE-2022-1714?
CVE-2022-1714 has been rated HIGH with a CVSS base score of 7.1/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2022-1714?
Check the references section above for vendor advisories and patch information. Affected products include: Radare Radare2.