VDB
CVE-2022-1437
CVE-2022-1437
PUBLISHED
CVSS 5.300000190734863 MEDIUM
Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.7.0. The bug causes the program reads data past the end of the intented buffer. Typically, this can allow attackers to read sensitive information from other memory locations or cause a crash.
EPSS 0.76% · 51.8th percentile
Risk Scores
CVSS 3.0
5.300000190734863
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
EPSS Score
0.76%
51.8th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| radareorg | radareorg/radare2 | unspecified |
| radare | radare2 | 0 |
Timeline
- Apr 22, 2022 CVE Published
- Apr 22, 2022 PoC Published
- Apr 23, 2022 EPSS Score
- Jun 12, 2022 EPSS Score
- Aug 2, 2022 EPSS Score
- Sep 21, 2022 EPSS Score
- Nov 10, 2022 EPSS Score
- Dec 30, 2022 EPSS Score
- Feb 18, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- Apr 9, 2023 EPSS Score
- May 28, 2023 EPSS Score