CVE-2022-0139: Use After Free in radareorg/radare2
Use After Free in GitHub repository radareorg/radare2 prior to 5.6.0.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
alpine/radare2to a version that resolves this vulnerability.Fixed in 5.6.0-r0
Event History
Frequently Asked Questions
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2022-0139.
What is the severity of CVE-2022-0139?
The severity of CVE-2022-0139 is critical with a CVSS score of 9.8.
Which software is affected by CVE-2022-0139?
The GitHub repository radareorg/radare2 prior to version 5.6.0 is affected by CVE-2022-0139.
How can I fix the Use After Free vulnerability in radareorg/radare2?
To fix the Use After Free vulnerability in radareorg/radare2, update to version 5.6.0 or later.
Where can I find more information about CVE-2022-0139?
You can find more information about CVE-2022-0139 at the following references: [link1](https://github.com/radareorg/radare2/commit/37897226a1a31f982bfefdc4aeefc2e50355c73c) and [link2](https://huntr.dev/bounties/3dcb6f40-45cd-403b-929f-db123fde32c0).