CVE-2022-1240: Heap buffer overflow in libr/bin/format/mach0/mach0.c in radareorg/radare2
Heap buffer overflow in libr/bin/format/mach0/mach0.c in GitHub repository radareorg/radare2 prior to 5.8.6. If address sanitizer is disabled during the compiling, the program should executes into the rstrncpy function. Therefore I think it is very likely to be exploitable. For more general description of heap buffer overflow, see CWE.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
alpine/radare2to a version that resolves this vulnerability.Fixed in 5.6.6-r0 - Upgrade
Upgrade
radareorg/radare2to a version that resolves this vulnerability.Fixed in 5.8.6
Event History
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2022-1240.
What is the severity of CVE-2022-1240?
The severity of CVE-2022-1240 is high (7.8).
Which software is affected by CVE-2022-1240?
The software affected by CVE-2022-1240 is Radare Radare2 version up to 5.6.6.
What can happen if address sanitizer is disabled in the compiling process?
If address sanitizer is disabled during the compiling process, a heap buffer overflow can occur.
Is CVE-2022-1240 likely to be exploitable?
Yes, CVE-2022-1240 is likely to be exploitable.