CVE-2022-1240

Name of the Vulnerable Software and Affected Versions radare2 versions prior to 5.8.6

Description A heap buffer overflow issue exists in the libr/bin/format/mach0/mach0.c file of the radare2 GitHub repository. This issue is likely exploitable, especially when the address sanitizer is disabled during compilation, allowing the program to execute into the r str ncpy function.

Recommendations For versions prior to 5.8.6, update to version 5.8.6 or later to resolve the issue. As a temporary workaround, consider enabling the address sanitizer during compilation to minimize the risk of exploitation.