7.1

CVE-2022-1382: radare radare2 NULL Pointer Dereference

CVSS: 7.1v2.0HighModified
AliasesUBUNTU-CVE-2022-1382
Published 16-04-2022Last modified 03-08-2024
Open JSON

Vulnerability summary

CVE-2022-1382 is a high (CVSS 7.1) NULL Pointer Dereference vulnerability in radare radare2. EPSS estimates a 0.70% chance of exploitation in the next 30 days, higher than 52.4% of scored vulnerabilities. 1 public exploit is recorded.

Overall risk
39/100
0100
Medium · default modelHow is this calculated?
CVSS score
7.1/10
010
High · v2.0 (NVD)
EPSS score
0.70%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits1reference

Advisory lineage

Upstream 0 · Downstream 1 · Related 1
OPENSUSE-SU-2024:12173-1

Timeline

  1. 16-04-2022
    PublishedVulnerability first disclosed.
  2. 03-08-2024
    Last modifiedVulnerability information updated.

Description

NULL Pointer Dereference in GitHub repository radareorg/radare2 prior to 5.6.8. This vulnerability is capable of making the radare2 crash, thus affecting the availability of the system.

CVSS metrics

6 scores · 3 sources · 3 versions

EPSS trend

Probability

0.70%

Chance of exploitation in the next 30 days

Percentile

52%

Versus all other CVEs

30-day change

0.00 pp

From 0.70% on 21-09-2026

21-09-202621-10-2026
EPSS score
0.70%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

1 found
  • referenceUnverified

    Exploit Reference (huntr.dev)

    Maturity: unknown

Weaknesses

CWE · root cause

Affected systems

Radare1 product
Radareorg1 product
Ubuntu1 product
  • radare2All versions (No fix recorded)

3 vendors · 3 products

References

4 links