CVE-2022-1382 - CVE House
Back to Database
Status published Medium CVE-2022-1382

NULL Pointer Dereference in radareorg/radare2

Vulnerability Description

NULL Pointer Dereference in GitHub repository radareorg/radare2 prior to 5.6.8. This vulnerability is capable of making the radare2 crash, thus affecting the availability of the system.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-1382

Credits & Attribution

No credits recorded in the NVD database.

References

More from radareorg

View All →
CVE-2025-1864
Buffer Overflow and Potential Code Execution in Radare2
Critical 10
CVE-2025-1744
Out-of-bounds Write in radare2
Critical 10
CVE-2023-5686
Heap-based Buffer Overflow in radareorg/radare2
Medium 5.1
CVE-2023-4322
Heap-based Buffer Overflow in radareorg/radare2
High 7.3
CVE-2023-1605
Denial of Service in radareorg/radare2
High 7.5

Affected Vendor

Affected Software

radareorg/radare2
Vulnerable Versions:
unspecified

Timeline

Official Publish: April 16th, 2022
Last Modified: August 3rd, 2024
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

Weaknesses (CWE)

CWE-476

MITRE ATT&CK TTPs

T1499 Endpoint Denial of Service
Impact
T1499.004 Application or System Exploitation
Impact
T1489 Service Stop
Impact
T1203 Exploitation for Client Execution
Execution
T1190 Exploit Public-Facing Application
Initial Access