VYPR
Medium severity5.5NVD Advisory· Published Jul 22, 2022· Updated Jun 17, 2026

CVE-2022-34520

CVE-2022-34520

Description

Radare2 v5.7.2 was discovered to contain a NULL pointer dereference via the function r_bin_file_xtr_load_buffer at bin/bfile.c. This vulnerability allows attackers to cause a Denial of Service (DOS) via a crafted binary file.

Affected products

3
  • Radare/Radare23 versions
    cpe:2.3:a:radare:radare2:5.7.2:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:radare:radare2:5.7.2:*:*:*:*:*:*:*
    • (no CPE)
    • (no CPE)range: =5.7.2

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.