CVE catalog

CVE-2022-1383

radare2-5.7.0-1.1 on GA media

Severity: Medium · CVSS 6.1CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H
Published: Apr 18, 2022, 1:15:00 AM UTC
Updated: Apr 22, 2026, 1:13:25 PM UTC
Source: [NVD] · [CVE record]
EPSS: 0.75% · Oct 25, 2026

Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.6.8. The bug causes the program reads data past the end of the intented buffer. Typically, this can allow attackers to read sensitive information from other memory locations or cause a crash.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

Distribution	Package	Release	Version	Status
Ubuntu	radare2	16.04	`0.9.6-3.1ubuntu1`	vulnerable
Opensuse	radare2	tumbleweed	`5.7.0-1.1`	fixed

Fixed-version evidence

Distribution	Package	Type	Release	Fixed version	Urgency	Origin	Bugs
Opensuse	radare2	rpm	tumbleweed	`5.7.0-1.1`	Not reported	OPENSUSE-SU-2024:12173-1	Not reported

OpenFactory catalog packages

[openSUSE Tumbleweed]

[libsdb2_5_0]Unknown
Source package: [radare2]
Details (1)
- 6.2.0-1.1 · x86_64 · tumbleweed
  Unknown · Fixed: 5.7.0-1.1
  Version impact unknown
  pypi · radare2 · opensuse · tumbleweed
[radare2-devel]Unknown
Source package: [radare2]
Details (1)
- 6.2.0-1.1 · x86_64 · tumbleweed
  Unknown · Fixed: 5.7.0-1.1
  Version impact unknown
  pypi · radare2 · opensuse · tumbleweed
[radare2-zsh-completion]Unknown
Source package: [radare2]
Details (1)
- 6.2.0-1.1 · noarch · tumbleweed
  Unknown · Fixed: 5.7.0-1.1
  Version impact unknown
  pypi · radare2 · opensuse · tumbleweed
[radare2]Fixed
Source package: [radare2]
Details (1)
- 6.2.0-1.1 · x86_64 · tumbleweed
  Fixed · Fixed: 5.7.0-1.1
  pypi · radare2 · opensuse · tumbleweed

Observed: Oct 23, 2026, 6:23:05 PM UTC

References

[FIRST EPSS] · [OSV Package Vulnerability Database] · [SUSE security advisories and VEX]