CVE-2022-34520

Name of the Vulnerable Software and Affected Versions Radare2 version 5.7.2

Description The issue is related to a NULL pointer dereference via the function r bin file xtr load buffer at bin/bfile.c. This allows attackers to cause a Denial of Service (DOS) via a crafted binary file.

Recommendations For Radare2 version 5.7.2, as a temporary workaround, consider disabling the r bin file xtr load buffer function until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.