CVE-2022-1451
Out-of-bounds Read in r_bin_java_constant_value_attr_new function in radareorg/radare2
Summary
Out-of-bounds Read in r_bin_java_constant_value_attr_new function in radareorg/radare2
Original description
The description as published by the source.
Out-of-bounds Read in r_bin_java_constant_value_attr_new function in GitHub repository radareorg/radare2 prior to 5.7.0. The bug causes the program reads data past the end 2f the intented buffer. Typically, this can allow attackers to read sensitive information from other memory locations or cause a crash. More details see CWE-125: Out-of-bounds read.
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Ubuntu UBUNTU-CVE-2022-1451 radare2
References
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- web huntr.dev