CVE-2022-1649

Name of the Vulnerable Software and Affected Versions radare2 versions prior to 5.7.0

Description The issue is a null pointer dereference in the libr/bin/format/mach0/mach0.c file of radare2. It is likely to be exploitable. The problem is related to a heap buffer overflow, for which a more general description can be found in the CWE definition.

Recommendations For versions prior to 5.7.0, update to version 5.7.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the vulnerable mach0.c file until a patch is available.