CVE-2022-1714

HighCVSS 7.1/10Last modified Jun 17, 2026

Description

Out-of-bounds Read in GitHub repository radareorg/radare2 prior to 5.7.0. The bug causes the program reads data past the end of the intented buffer. Typically, this can allow attackers to read sensitive information from other memory locations or cause a crash.

Metrics

CVSS 3.1 7.1/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Weakness enumeration

CWE-125

Affected software

No affected versions have been published.

Timeline

Published: May 13, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-17159.8Account Takeover in GitHub repository neorazorx/facturascripts prior to 2022.07.CVE-2022-17164.6Keep My Notes v1.80.147 allows an attacker with physical access to the victim's device to bypass the application's password/pin lock to acce CVE-2022-17174.8The Custom Share Buttons with Floating Sidebar WordPress plugin before 4.2 does not sanitise and escape some of its settings, which could al CVE-2022-17187.5The trudesk application allows large characters to insert in the input field "Full Name" on the signup field which can allow attackers to ca CVE-2022-17195.4Reflected XSS on ticket filter function in GitHub repository polonel/trudesk prior to 1.2.2. This vulnerability is capable of executing a ma CVE-2022-17207.8Buffer Over-read in function grab_file_name in GitHub repository vim/vim prior to 8.2.4956. This vulnerability is capable of crashing the so CVE-2022-17217.5Path Traversal in WellKnownServlet in GitHub repository jgraph/drawio prior to 18.0.5. Read local files of the web application.CVE-2022-17223.3SSRF in editor's proxy via IPv6 link-local address in GitHub repository jgraph/drawio prior to 18.0.5. SSRF to internal link-local IPv6 addr CVE-2022-17237.5Server-Side Request Forgery (SSRF) in GitHub repository jgraph/drawio prior to 18.0.6.CVE-2022-17246.1The Simple Membership WordPress plugin before 4.1.1 does not properly sanitise and escape parameters before outputting them back in AJAX act CVE-2022-17255.5NULL Pointer Dereference in GitHub repository vim/vim prior to 8.2.4959.CVE-2022-17265.4Bootstrap Tables XSS vulnerability with Table Export plug-in when exportOptions: htmlContent is true in GitHub repository wenzhixin/bootstra