CVE-2022-0849

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2022-0849
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-0849.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2022-0849
Downstream
Related
Published
2022-03-05T10:15:07Z
Modified
2025-09-19T13:33:53.489283Z
Severity
  • 5.5 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVSS Calculator
Summary
[none]
Details

Use After Free in rreggetnameidx in GitHub repository radareorg/radare2 prior to 5.6.6.

References

Affected packages

Git / github.com/radare/radare2

Affected ranges

Type
GIT
Repo
https://github.com/radare/radare2
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
50b8813f1df7fbae3bbcb0e8d04397cd353d4759
Type
GIT
Repo
https://github.com/radareorg/radare2
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
10517e3ff0e609697eb8cde60ec8dc999ee5ea24

Affected versions

0.*

0.10.0
0.10.1
0.10.2
0.10.3
0.10.4
0.10.4-termux4
0.10.5
0.10.6
0.8.6
0.8.8
0.9
0.9.2
0.9.4
0.9.6
0.9.7
0.9.8
0.9.8-rc1
0.9.8-rc2
0.9.8-rc3
0.9.8-rc4
0.9.9

1.*

1.0
1.0.0
1.0.1
1.0.2
1.1.0
1.2.0
1.2.0-git
1.3.0
1.3.0-git
1.4.0
1.5.0
1.6.0

2.*

2.0.0
2.0.1
2.1.0
2.2.0
2.4.0
2.5.0
2.6.0
2.6.9
2.7.0
2.8.0
2.9.0

3.*

3.0.0
3.0.1
3.1.0
3.1.1
3.1.2
3.1.3
3.2.0
3.2.1
3.3.0
3.4.0
3.4.1
3.5.0
3.5.1
3.6.0
3.7.0
3.7.1
3.8.0
3.9.0

4.*

4.0.0
4.1.0
4.1.1
4.2.0
4.2.1
4.3.0
4.3.1
4.4.0
4.5.1

5.*

5.0.0
5.1.0
5.1.1
5.2.0
5.2.1
5.3.0
5.3.1
5.4.0
5.4.0-git
5.4.2
5.5.0
5.5.2
5.5.4
5.6.0
5.6.2
5.6.4

Other

Continuous-Windows
continuous
radare2-windows-nightly
termux

release-5.*

release-5.0.0

Database specific 

{
    "vanir_signatures": [
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "248703042087547650931829489021330946693",
                    "303082029420654455372568773614294085007",
                    "233835211568827527701686548302743389874",
                    "237053497720261221732558082134243876349",
                    "39552186032153365246311784909057731859",
                    "259015929924226254055811560665894860234",
                    "306265339556989330828556346707571755272",
                    "239698056189293661340679831939965898025",
                    "152218095028500660250169403200519688878",
                    "85487560684615839369043740098829315278",
                    "208399799703906950163957621798976264600"
                ]
            },
            "signature_type": "Line",
            "source": "https://github.com/radare/radare2/commit/50b8813f1df7fbae3bbcb0e8d04397cd353d4759",
            "signature_version": "v1",
            "target": {
                "file": "libr/debug/dreg.c"
            },
            "deprecated": false,
            "id": "CVE-2022-0849-0e8aff06"
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "328844296527964699559187876661418238576",
                    "253920139967170652729387284666385654249",
                    "117571790103213992821300394342125765222",
                    "10396150301260521368715778446628543679"
                ]
            },
            "signature_type": "Line",
            "source": "https://github.com/radare/radare2/commit/50b8813f1df7fbae3bbcb0e8d04397cd353d4759",
            "signature_version": "v1",
            "target": {
                "file": "libr/core/cmd_anal.c"
            },
            "deprecated": false,
            "id": "CVE-2022-0849-18778cc5"
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "213765086355771058472477910705343883961",
                    "89790441817078344644383730333981319044",
                    "213333729231125549779341548930031751243",
                    "120248620568742779005761806653451584249",
                    "22537003395455939759851394673649414212",
                    "191854970582966962788872313843775024303"
                ]
            },
            "signature_type": "Line",
            "source": "https://github.com/radareorg/radare2/commit/10517e3ff0e609697eb8cde60ec8dc999ee5ea24",
            "signature_version": "v1",
            "target": {
                "file": "libr/anal/arch/kvx/kvx-dis.c"
            },
            "deprecated": false,
            "id": "CVE-2022-0849-424cd6ab"
        },
        {
            "digest": {
                "function_hash": "91655719831952633604622023602399838594",
                "length": 5910.0
            },
            "signature_type": "Function",
            "source": "https://github.com/radare/radare2/commit/50b8813f1df7fbae3bbcb0e8d04397cd353d4759",
            "signature_version": "v1",
            "target": {
                "file": "libr/core/cmd_anal.c",
                "function": "r_core_esil_step"
            },
            "deprecated": false,
            "id": "CVE-2022-0849-4e88202b"
        },
        {
            "digest": {
                "function_hash": "10552958541101443880575713688090510761",
                "length": 875.0
            },
            "signature_type": "Function",
            "source": "https://github.com/radare/radare2/commit/50b8813f1df7fbae3bbcb0e8d04397cd353d4759",
            "signature_version": "v1",
            "target": {
                "file": "libr/debug/dreg.c",
                "function": "r_debug_reg_get_err"
            },
            "deprecated": false,
            "id": "CVE-2022-0849-5335f1d4"
        },
        {
            "digest": {
                "function_hash": "29314619787694526168489727171795055358",
                "length": 11006.0
            },
            "signature_type": "Function",
            "source": "https://github.com/radareorg/radare2/commit/10517e3ff0e609697eb8cde60ec8dc999ee5ea24",
            "signature_version": "v1",
            "target": {
                "file": "libr/core/canal.c",
                "function": "r_core_anal_esil"
            },
            "deprecated": false,
            "id": "CVE-2022-0849-beb4ff89"
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "151064647522737207038002641701585694863",
                    "201365850078930523467155440313041050278",
                    "554038712851727814517202502238081400",
                    "324338367633045011599208690070818159873",
                    "56385803904105892907393414183581565035",
                    "240670378416876508853000422189348650731",
                    "146829273222403198238370115543802493349",
                    "102031994098096621632032186568513427491",
                    "87971830114110525738348029478243366818",
                    "185955500592097293907552019374544936261",
                    "199388977453254583941216655083914577543",
                    "136946638542802779447976922196123008198",
                    "46635598810570935585993285740003608110",
                    "233094890459719100904538479784911914985",
                    "180360847390077681308585587325680990820",
                    "249563213585219776144824656136905610165",
                    "286633133228900811945643277261546511320",
                    "311980242921761321401146147844926487932",
                    "80608826832715956418700186523814642451",
                    "209390963745659760807096113845557541573",
                    "86048076452562526843487165905455235786",
                    "267463692106349288449640160127787313016",
                    "125708555951061599578157021434035750098",
                    "131403765359724178913091539440941172748",
                    "323159029650079713824866077075082255280",
                    "20188011992452861846917563997583082047",
                    "35740221887617757029552982806479415225",
                    "223925531037739692980855818059910109808",
                    "17234652263441789648201845508888265416",
                    "180267086269781376993331393279620372491",
                    "165698561540128184225510915470279436431",
                    "223774474208127358576405743499111327490",
                    "246345232109034014572490130845049722191",
                    "258294918034310798015531797897383954889",
                    "258152791728822496364466686216350541360",
                    "216906543414112680097068866529813567763",
                    "315130977621343134344850210640948007791"
                ]
            },
            "signature_type": "Line",
            "source": "https://github.com/radareorg/radare2/commit/10517e3ff0e609697eb8cde60ec8dc999ee5ea24",
            "signature_version": "v1",
            "target": {
                "file": "libr/core/canal.c"
            },
            "deprecated": false,
            "id": "CVE-2022-0849-fc5838d2"
        }
    ]
}