Read the docs
TI-2022-01326 Aliases CVE-2022-1451GHSA-c72r-87h5-77h5

Out-of-bounds Read in r_bin_java_constant_value_attr_new function in radareorg/radare2

Priority LOW 33CWE-788Published · Updated

Key facts

Attack vector
Local
Privileges required
None
User interaction
Required
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
High · None · High
Fix status
Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA.

Summary

Out-of-bounds Read in r_bin_java_constant_value_attr_new function in GitHub repository radareorg/radare2 prior to 5.7.0. The bug causes the program reads data past the end 2f the intented buffer. Typically, this can allow attackers to read sensitive information from other memory locations or cause a crash. More details see [CWE-125: Out-of-bounds read](https://cwe.mitre.org/data/definitions/125.html).

Why it matters now

EPSS 0.00809 57th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix Fixed radareorg/radare2 (radareorg): 5.7.0

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
radareorgradareorg/radare2before 5.7.05.7.0Patch availableCNA
  • radareorg/radare2 Vendorradareorg Affected before 5.7.0 Fixed in 5.7.0 Patch available CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:radare:radare2:*:*:*:*:*:*:*:*before 5.7.0Vulnerableradareorg
  • cpe:2.3:a:radare:radare2:*:*:*:*:*:*:*:* Versions before 5.7.0 Vulnerable ·radareorg

Remediation

  • Fix · CNA radareorg/radare2 (radareorg) Fixed in 5.7.0

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Release ·

    radareorg/radare2 5.7.0

    2 records Highest priority Priority LOW 2 LOW

    Other records, highest priority first

    • TI-2022-01327 Out-of-bounds Read in r_bin_java_bootstrap_methods_attr_new function in radareorg/radare2Priority LOW 33
    Show all 2 records →

Vendor assessments

Red Hat

Red Hat's page for this CVE →

Not affected: 1 product
  • Red Hat

Timeline

  1. 2026-10-02 Threatist record created from CVE-2022-1451
  2. 2026-10-03 Alias added: GHSA-c72r-87h5-77h5

References

Exploit 1

Patch 1

  • TI-2023-25089 An out-of-bounds read in radare2 v.5.8.9 and before exists in the print_insn32 function… CVSS 3.1CRITICAL 9.8
  • TI-2023-25088 An out-of-bounds read in radare2 v.5.8.9 and before exists in the print_insn32_fpu… CVSS 3.1CRITICAL 9.8
  • TI-2021-12172 Radare2 has a division by zero vulnerability in Mach-O parser's rebase_buffer function. CVSS 3.1CRITICAL 10.0
  • TI-2026-07640 radare2 6.1.5 Use-After-Free via gdbr_pids_list() CVSS 4.0HIGH 8.7
  • TI-2026-07639 radare2 6.1.5 Use-After-Free via gdbr_threads_list() CVSS 4.0HIGH 8.7
  • TI-2023-03993 Heap-based Buffer Overflow in radareorg/radare2 CVSS 3.1CRITICAL 9.8
See all 178 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences