High severity · published May 13, 2022
CVE-2022-1714
Out-of-bounds Read in GitHub repository radareorg/radare2 prior to 5.7.0
7.1
CVSS
0.4%
EPSS
No
On KEV
Description
Out-of-bounds Read in GitHub repository radareorg/radare2 prior to 5.7.0. The bug causes the program reads data past the end of the intented buffer. Typically, this can allow attackers to read sensitive information from other memory locations or cause a crash.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 37% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
RA
Radare2 · Radare
before 5.7.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2022-1714
CVE.org
https://www.cve.org/CVERecord?id=CVE-2022-1714
Patch
https://github.com/radareorg/radare2/commit/3ecdbf8e21186a9c5a4d3cfa3b1e9fd27045340e
Exploit
https://huntr.dev/bounties/1c22055b-b015-47a8-a57b-4982978751d0
More from Radare2
9.8
CVE-2026-8696
radare2 6.1.5 Use-After-Free via gdbr_pids_list()
9.8
CVE-2026-8695
radare2 6.1.5 Use-After-Free via gdbr_threads_list()
9.8
CVE-2025-1864
Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in radareorg radare2 allows Overflow Buffers.This issue affects radare2: before <5.9.9
9.8
CVE-2025-1744
Out-of-bounds Write vulnerability in radareorg radare2 allows heap-based buffer over-read or buffer overflow.This issue affects radare2: before <5.9.9
9.8
CVE-2024-29646
Buffer Overflow vulnerability in radarorg radare2 v.5.8.8 allows an attacker to execute arbitrary code via the name, type, or group fields