cvedb.io
CVE-2022-1451
HIGH · CVSS 7.1
EPSS exploitation probability: 0%
Published 2022-04-24T21:15:07.763 · Last modified 2026-06-17T04:22:28.630

Summary

Out-of-bounds Read in r_bin_java_constant_value_attr_new function in GitHub repository radareorg/radare2 prior to 5.7.0. The bug causes the program reads data past the end 2f the intented buffer. Typically, this can allow attackers to read sensitive information from other memory locations or cause a crash. More details see [CWE-125: Out-of-bounds read](https://cwe.mitre.org/data/definitions/125.html).

Affected products

radare — radare2

Does this affect you?

Add your gear to cvedb and we'll alert you only when radare ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.