CVE-2022-1296

PoC —

CVSS 3.1

9.1 critical

EPSS

<1%p54

Published

Apr 11, 2022 (Apr 11, 2022)

Modified

Jun 17, 2026

Description

Out-of-bounds read in `r_bin_ne_get_relocs` function in GitHub repository radareorg/radare2 prior to 5.6.8. This vulnerability may allow attackers to read sensitive information or cause a crash.

Vendors: radare
Products: radare2
Weakness: CWE-125
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (0.8%)

In the news0 stories

No ingested article mentions this CVE yet.