CVE-2022-1649: Null pointer dereference in libr/bin/format/mach0/mach0.c in radareorg/radare2 in radareorg/radare2
Published May 10, 2022
·Updated
Null pointer dereference in libr/bin/format/mach0/mach0.c in radareorg/radare2 in GitHub repository radareorg/radare2 prior to 5.7.0. It is likely to be exploitable. For more general description of heap buffer overflow, see CWE.
Affected Software
8 affected componentsFixes available
Radare Radare2<5.7.0
alpine/radare2<5.7.0-r0
5.7.0-r0
alpine/radare2<5.7.0-r0
5.7.0-r0
alpine/radare2<5.7.0-r0
5.7.0-r0
alpine/radare2<5.7.0-r0
5.7.0-r0
alpine/radare2<5.7.0-r0
5.7.0-r0
alpine/radare2<5.7.0-r0
5.7.0-r0
alpine/radare2<5.7.0-r0
5.7.0-r0
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
alpine/radare2to a version that resolves this vulnerability.Fixed in 5.7.0-r0
Event History
May 10, 2022
CVE Published
via MITRE·09:55 AM
Data Sourced
via MITRE·09:55 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·05:15 PM
RemedyDescriptionSeverityWeaknessAffected Software
Data Sourced
via OSV·05:15 PM
DescriptionSeverityAffected Software
Event
05:15 PM
Frequently Asked Questions
1
What is the vulnerability ID?
The vulnerability ID is CVE-2022-1649.
2
What is the title of the vulnerability?
The title of the vulnerability is 'Null pointer dereference in libr/bin/format/mach0/mach0.c in radareorg/radare2 in GitHub repository'.
3
What is the severity of CVE-2022-1649?
The severity of CVE-2022-1649 is high with a severity value of 5.5.
4
What software is affected by CVE-2022-1649?
Radare Radare2 versions up to and excluding 5.7.0 are affected by CVE-2022-1649.
5
How can CVE-2022-1649 be exploited?
CVE-2022-1649 is likely to be exploitable.