What’s Vulnerable › Vulnerabilities
CVE-2022-4843: NULL Pointer Dereference in radareorg/radare2
- Severity: high (CVSS 7.5 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.7% probability of exploitation in the next 30 days
- Public exploit or detection template: yes
- Published: 2022-12-29 · updated 2026-06-17
- Weakness: CWE-476
Description
NULL Pointer Dereference in GitHub repository radareorg/radare2 prior to 5.8.2.
Affected products
- radareorg/radare2: before 5.8.2 — fixed in 5.8.2
How to fix
Upgrade to a fixed version: radareorg/radare2 5.8.2. Check the vendor advisory for mitigations.
References
- https://github.com/radareorg/radare2/commit/842f809d4ec6a12af2906f948657281c9ebc8a24
- https://huntr.dev/bounties/075b2760-66a0-4d38-b3b5-e9934956ab7f
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FOXRDPI3OYYKO4PKXE3XD2IFONL6BCHR/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OFCCTYAD7ASNQ23ABCUPAZHEDEIOCW6T/
- https://github.com/radareorg/radare2/commit/842f809d4ec6a12af2906f948657281c9ebc8a24
- https://huntr.dev/bounties/075b2760-66a0-4d38-b3b5-e9934956ab7f
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FOXRDPI3OYYKO4PKXE3XD2IFONL6BCHR/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OFCCTYAD7ASNQ23ABCUPAZHEDEIOCW6T/
Get alerted when CVE-2022-4843 or the next vulnerability affects your stack