CVE-2022-1237: Improper Validation of Array Index in radareorg/radare2
Improper Validation of Array Index in GitHub repository radareorg/radare2 prior to 5.6.8. This vulnerability is heap overflow and may be exploitable. For more general description of heap buffer overflow, see CWE.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
alpine/radare2to a version that resolves this vulnerability.Fixed in 5.6.8-r0
Event History
Frequently Asked Questions
What is CVE-2022-1237?
CVE-2022-1237 is a vulnerability in the GitHub repository radareorg/radare2 that allows for heap overflow and potential exploitation.
What is the severity of CVE-2022-1237?
CVE-2022-1237 has a severity rating of 7.8 (high).
How does CVE-2022-1237 affect Radare Radare2?
CVE-2022-1237 affects Radare Radare2 versions up to, but not including, 5.6.8.
How can I fix CVE-2022-1237?
To fix CVE-2022-1237, it is recommended to update Radare Radare2 to version 5.6.8 or later.
Where can I find more information about CVE-2022-1237?
You can find more information about CVE-2022-1237 on the GitHub page (https://github.com/radareorg/radare2/commit/2d782cdaa2112c10b8dd5e7a93c134b2ada9c1a6) and the Huntr.dev page (https://huntr.dev/bounties/ad3c9c4c-76e7-40c8-bd4a-c095acd8bb40).