CVE-2022-1382 MEDIUM

CVE-2022-1382: NULL Pointer Dereference in radareorg/radare2

Vendor Radareorg

Product radareorg/radare2

Weakness CWE-476

Published April 16, 2022

Last update August 3, 2024

View on NVD All CVEs

CVSS base score

5.3/10

Attack vector Local

Attack complexity Low

Privileges required None

User interaction Required

Confidentiality Low

Integrity Low

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

What the vulnerability does

01Description

NULL Pointer Dereference in GitHub repository radareorg/radare2 prior to 5.6.8. This vulnerability is capable of making the radare2 crash, thus affecting the availability of the system.

Key dates

02Disclosure timeline

April 16, 2022 CVE published

August 3, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2022-1382 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/476.html

Related vulnerabilities

Identifiers

CVE CVE-2022-1382

CWE CWE-476

CVSS 5.3 / MEDIUM

Affected versions