Vulnerabilities

TI-2022-00442 CVE-2022-0522 · GHSA-jxcj-83rp-9hxv

Access of Memory Location Before Start of Buffer in radareorg/radare2

LOW 33

Access of Memory Location Before Start of Buffer in NPM radare2.js prior to 5.6.2.

CVSS 3.1HIGH 7.1 Local No auth User interaction EPSS 0.00962 Published 2022-02-08 Fixed in 5.6.2 CWE-786

TI-2022-00441 CVE-2022-0521 · GHSA-cwqh-h5q7-wc9w

LOW 33

Access of Memory Location After End of Buffer in GitHub repository radareorg/radare2 prior to 5.6.2.

CVSS 3.1HIGH 7.1 Local No auth User interaction EPSS 0.00954 Published 2022-02-08 Fixed in 5.6.2 CWE-788

TI-2022-00440 CVE-2022-0520 · GHSA-3h5c-v4x2-h5xf

LOW 36

Use After Free in NPM radare2.js prior to 5.6.2.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01147 Published 2022-02-08 Fixed in 5.6.2 CWE-416

TI-2022-00439 CVE-2022-0519 · GHSA-gpxc-pcvp-q2mx

LOW 33

Buffer Access with Incorrect Length Value in GitHub repository radareorg/radare2 prior to 5.6.2.

CVSS 3.1HIGH 7.1 Local No auth User interaction EPSS 0.00954 Published 2022-02-08 Fixed in 5.6.2 CWE-805

TI-2022-00438 CVE-2022-0518 · GHSA-533q-88rf-cgxx

LOW 33

Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.6.2.

CVSS 3.1HIGH 7.1 Local No auth User interaction EPSS 0.01005 Published 2022-02-08 Fixed in 5.6.2 CWE-122

TI-2022-00443 CVE-2022-0523 · GHSA-g7mg-6rh4-c572

LOW 36

Use After Free in GitHub repository radareorg/radare2 prior to 5.6.2.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01092 Published 2022-02-08 Fixed in 5.6.2 CWE-416