CVE-2022-0522

CVE-2022-0522 · Access of Memory Location Before Start of Buffer in radareorg/radare2

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Access of Memory Location Before Start of Buffer in NPM radare2.js prior to 5.6.2.

CVSS 6.3 · Medium · EPSS 1.0% · Fix available

Stack: system

Affected products and versions

radareorg/radare2
Versions
- ≥ unspecified, < 5.6.2: Affected (custom)
Update to 5.6.2
radare2 Ubuntu:16.04:LTS
Versions
- 0.9.6-3.1ubuntu1
Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
radare2 Ubuntu:Pro:18.04:LTS
Versions
- 1.6.0+dfsg-1
- 2.0.0+dfsg-1
- 2.1.0+dfsg-1
- 2.3.0+dfsg-1
- 2.3.0+dfsg-2
- 2.3.0+dfsg-2ubuntu0.1~esm1
Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
radare2 Ubuntu:Pro:20.04:LTS
Versions
- 3.2.1+dfsg-5build1
- 4.0.0+dfsg-1
- 4.2.1+dfsg-1
- 4.2.1+dfsg-2
- 4.2.1+dfsg-2ubuntu0.1~esm1
Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
radare2 Ubuntu:Pro:24.04:LTS
Versions
- 5.5.0+dfsg-1ubuntu1
- 5.5.0+dfsg-1.1ubuntu2
- 5.5.0+dfsg-1.1ubuntu3
- 5.5.0+dfsg-1.1ubuntu3+esm1
Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
radare2 Ubuntu:25.10
Versions
- 5.9.8+dfsg-2
- 5.9.8+dfsg-2ubuntu0.25.10.1
- 5.9.8+dfsg-2ubuntu0.25.10.2
Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
radare2 Ubuntu:26.10
Versions
- 6.0.7+ds-1
- 6.1.6+ds-2
- 6.1.6+ds-3
- 6.1.8+ds-1
Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
radare2 Ubuntu:26.04:LTS
Versions
- 5.9.8+dfsg-2
- 6.0.4+dfsg-1
- 6.0.7+ds-1
Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published