OSV-2022-383

    Dashboard / Vulnerabilities / OSV-2022-383

    OSV-2022-383

    Published: 30 Apr 2022Last Modified: 30 Apr 2022

    Summary: Heap-use-after-free in r_asm_free

    Details: OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47113 ``` Crash type: Heap-use-after-free READ 4 Crash state: r_asm_free r_core_fini r_core_free ```

    References: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47113

    Affected packages

    Package

    Name: radare2

    Purl: pkg:generic/radare2

    Affected ranges

    Type: GIT

    Events:

    Introduced- c54ce884d89317ff7f69ae7195168a8f0efb935e
    Fixed -3a9ba748f2bee9d3950346dac0753145809e4abc

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    OSV-2022-383 | CVE-DB