CVE-2022-1237
Assigner: @huntrdev
Published: 2022-04-06T09:35:11
State: PUBLISHED
affected: product: radareorg/radare2
vendor: radareorg
versions: lessThan: 5.6.8
status: affected
version: unspecified
versionType: custom
descriptions: value: Improper Validation of Array Index in GitHub repository radareorg/radare2 prior to 5.6.8. This vulnerability is heap overflow and may be exploitable. For more general description of heap buffer overflow, see [CWE](https://cwe.mitre.org/data/definitions/122.html).
metrics: cvssV3_0: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 7.6
baseSeverity: HIGH
confidentialityImpact: LOW
integrityImpact: LOW
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H
version: 3.0
problemTypes: descriptions: cweId: CWE-129
description: CWE-129 Improper Validation of Array Index
type: CWE
source: advisory: ad3c9c4c-76e7-40c8-bd4a-c095acd8bb40
discovery: EXTERNAL
title: Improper Validation of Array Index in radareorg/radare2