First published: Thu Mar 24 2022(Updated: )
Heap Buffer Overflow in iterate_chained_fixups in GitHub repository radareorg/radare2 prior to 5.6.6.
Credit: security@huntr.dev
Affected Software | Affected Version | How to fix |
---|---|---|
Radare Radare2 | <5.6.6 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The severity of CVE-2022-1052 is high with a severity value of 5.5.
Radare Radare2 versions up to exclusive 5.6.6 are affected by CVE-2022-1052.
CVE-2022-1052 is a heap buffer overflow vulnerability in the iterate_chained_fixups function in the GitHub repository radareorg/radare2.
To fix CVE-2022-1052, update Radare Radare2 to version 5.6.6 or newer.
You can find more information about CVE-2022-1052 at the following references: [GitHub commit](https://github.com/radareorg/radare2/commit/0052500c1ed5bf8263b26b9fd7773dbdc6f170c4) and [Huntr dev](https://huntr.dev/bounties/3b3b7f77-ab8d-4de3-999b-eeec0a3eebe7).