OSV-2022-993

    Dashboard / Vulnerabilities / OSV-2022-993

    OSV-2022-993

    Published: 29 Sept 2022Last Modified: 28 Sept 2026

    Summary: Stack-use-after-return in check_buffer

    Details: OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51910 ``` Crash type: Stack-use-after-return READ 1 Crash state: check_buffer r_bin_get_binplugin_by_buffer r_bin_file_new_from_buffer ```

    References: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51910

    Affected packages

    Package

    Name: radare2

    Purl: pkg:generic/radare2

    Affected ranges

    Type: GIT

    Events:

    Introduced- 67ead854ea3736384f6d13a56ce9e5fa14c9478c
    Fixed -None

    Affected versions

    5.8.0
    5.8.2
    5.8.4
    5.8.6
    5.8.8

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    OSV-2022-993 | CVE-DB