CVE-2022-1237

    Dashboard / Vulnerabilities / CVE-2022-1237

    CVE-2022-1237

    Published: 6 Apr 2022Last Modified: 12 Aug 2026

    Summary: Improper Validation of Array Index in radareorg/radare2

    Details: Improper Validation of Array Index in GitHub repository radareorg/radare2 prior to 5.6.8. This vulnerability is heap overflow and may be exploitable. For more general description of heap buffer overflow, see [CWE](https://cwe.mitre.org/data/definitions/122.html).

    References: https://huntr.dev/bounties/ad3c9c4c-76e7-40c8-bd4a-c095acd8bb40, https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/1xxx/CVE-2022-1237.json, https://nvd.nist.gov/vuln/detail/CVE-2022-1237, https://github.com/radareorg/radare2/commit/2d782cdaa2112c10b8dd5e7a93c134b2ada9c1a6

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 0
    Fixed -d94100d386e8bc349b500af309e1880447a1e9da

    Affected versions

    5.6.6
    5.6.4
    5.6.2
    5.6.0

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2022-1237 | CVE-DB