Read the docs
TI-2022-01318 Aliases CVE-2022-1437GHSA-6c8c-qvc7-64g8

Heap-based Buffer Overflow in radareorg/radare2

Priority LOW 33CWE-122Published · Updated

Key facts

Attack vector
Local
Privileges required
None
User interaction
Required
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
High · None · High
Fix status
Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA.

Summary

Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.7.0. The bug causes the program reads data past the end of the intented buffer. Typically, this can allow attackers to read sensitive information from other memory locations or cause a crash.

Why it matters now

EPSS 0.00769 55th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix Fixed radareorg/radare2 (radareorg): 5.7.0

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
radareorgradareorg/radare2before 5.7.05.7.0Patch availableCNA
  • radareorg/radare2 Vendorradareorg Affected before 5.7.0 Fixed in 5.7.0 Patch available CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:radare:radare2:*:*:*:*:*:*:*:*before 5.7.0Vulnerableradareorg
  • cpe:2.3:a:radare:radare2:*:*:*:*:*:*:*:* Versions before 5.7.0 Vulnerable ·radareorg

Remediation

  • Fix · CNA radareorg/radare2 (radareorg) Fixed in 5.7.0

Vendor assessments

Red Hat

Red Hat's page for this CVE →

Not affected: 1 product
  • Red Hat

Timeline

  1. 2026-10-02 Threatist record created from CVE-2022-1437
  2. 2026-10-03 Alias added: GHSA-6c8c-qvc7-64g8

References

Exploit 1

Patch 1

  • TI-2023-25089 An out-of-bounds read in radare2 v.5.8.9 and before exists in the print_insn32 function… CVSS 3.1CRITICAL 9.8
  • TI-2023-25088 An out-of-bounds read in radare2 v.5.8.9 and before exists in the print_insn32_fpu… CVSS 3.1CRITICAL 9.8
  • TI-2021-12172 Radare2 has a division by zero vulnerability in Mach-O parser's rebase_buffer function. CVSS 3.1CRITICAL 10.0
  • TI-2026-07640 radare2 6.1.5 Use-After-Free via gdbr_pids_list() CVSS 4.0HIGH 8.7
  • TI-2026-07639 radare2 6.1.5 Use-After-Free via gdbr_threads_list() CVSS 4.0HIGH 8.7
  • TI-2023-03993 Heap-based Buffer Overflow in radareorg/radare2 CVSS 3.1CRITICAL 9.8
See all 178 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences