CVE-2022-0849

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2022-0849
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-0849.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2022-0849
Downstream
Related
Published
2022-03-05T10:15:07Z
Modified
2025-10-19T14:12:06.200898Z
Severity
  • 5.5 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVSS Calculator
Summary
[none]
Details

Use After Free in rreggetnameidx in GitHub repository radareorg/radare2 prior to 5.6.6.

References

Affected packages

Git / github.com/radare/radare2

Affected ranges

Type
GIT
Repo
https://github.com/radare/radare2
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
50b8813f1df7fbae3bbcb0e8d04397cd353d4759

Affected versions

0.*

0.10.0
0.10.1
0.10.2
0.10.3
0.10.4
0.10.4-termux4
0.10.5
0.10.6
0.8.6
0.8.8
0.9
0.9.2
0.9.4
0.9.6
0.9.7
0.9.8
0.9.8-rc1
0.9.8-rc2
0.9.8-rc3
0.9.8-rc4
0.9.9

1.*

1.0
1.0.0
1.0.1
1.0.2
1.1.0
1.2.0
1.2.0-git
1.3.0
1.3.0-git
1.4.0
1.5.0
1.6.0

2.*

2.0.0
2.0.1
2.1.0
2.2.0
2.4.0
2.5.0
2.6.0
2.6.9
2.7.0
2.8.0
2.9.0

3.*

3.0.0
3.0.1
3.1.0
3.1.1
3.1.2
3.1.3
3.2.0
3.2.1
3.3.0
3.4.0
3.4.1
3.5.0
3.5.1
3.6.0
3.7.0
3.7.1
3.8.0
3.9.0

4.*

4.0.0
4.1.0
4.1.1
4.2.0
4.2.1
4.3.0
4.3.1
4.4.0
4.5.1

5.*

5.0.0
5.1.0
5.1.1
5.2.0
5.2.1
5.3.0
5.3.1
5.4.0
5.4.0-git
5.4.2
5.5.0
5.5.2
5.5.4
5.6.0
5.6.2
5.6.4

Other

Continuous-Windows
continuous
radare2-windows-nightly
termux

release-5.*

release-5.0.0

Database specific

vanir_signatures

[
    {
        "source": "https://github.com/radare/radare2/commit/50b8813f1df7fbae3bbcb0e8d04397cd353d4759",
        "id": "CVE-2022-0849-0e8aff06",
        "signature_type": "Line",
        "signature_version": "v1",
        "deprecated": false,
        "target": {
            "file": "libr/debug/dreg.c"
        },
        "digest": {
            "line_hashes": [
                "248703042087547650931829489021330946693",
                "303082029420654455372568773614294085007",
                "233835211568827527701686548302743389874",
                "237053497720261221732558082134243876349",
                "39552186032153365246311784909057731859",
                "259015929924226254055811560665894860234",
                "306265339556989330828556346707571755272",
                "239698056189293661340679831939965898025",
                "152218095028500660250169403200519688878",
                "85487560684615839369043740098829315278",
                "208399799703906950163957621798976264600"
            ],
            "threshold": 0.9
        }
    },
    {
        "source": "https://github.com/radare/radare2/commit/50b8813f1df7fbae3bbcb0e8d04397cd353d4759",
        "id": "CVE-2022-0849-18778cc5",
        "signature_type": "Line",
        "signature_version": "v1",
        "deprecated": false,
        "target": {
            "file": "libr/core/cmd_anal.c"
        },
        "digest": {
            "line_hashes": [
                "328844296527964699559187876661418238576",
                "253920139967170652729387284666385654249",
                "117571790103213992821300394342125765222",
                "10396150301260521368715778446628543679"
            ],
            "threshold": 0.9
        }
    },
    {
        "source": "https://github.com/radare/radare2/commit/50b8813f1df7fbae3bbcb0e8d04397cd353d4759",
        "id": "CVE-2022-0849-4e88202b",
        "signature_type": "Function",
        "signature_version": "v1",
        "deprecated": false,
        "target": {
            "function": "r_core_esil_step",
            "file": "libr/core/cmd_anal.c"
        },
        "digest": {
            "function_hash": "91655719831952633604622023602399838594",
            "length": 5910.0
        }
    },
    {
        "source": "https://github.com/radare/radare2/commit/50b8813f1df7fbae3bbcb0e8d04397cd353d4759",
        "id": "CVE-2022-0849-5335f1d4",
        "signature_type": "Function",
        "signature_version": "v1",
        "deprecated": false,
        "target": {
            "function": "r_debug_reg_get_err",
            "file": "libr/debug/dreg.c"
        },
        "digest": {
            "function_hash": "10552958541101443880575713688090510761",
            "length": 875.0
        }
    }
]

Git / github.com/radare/radare2

Affected ranges

Type
GIT
Repo
https://github.com/radareorg/radare2
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
10517e3ff0e609697eb8cde60ec8dc999ee5ea24

Affected versions

0.*

0.10.0
0.10.1
0.10.2
0.10.3
0.10.4
0.10.4-termux4
0.10.5
0.10.6
0.8.6
0.8.8
0.9
0.9.2
0.9.4
0.9.6
0.9.7
0.9.8
0.9.8-rc1
0.9.8-rc2
0.9.8-rc3
0.9.8-rc4
0.9.9

1.*

1.0
1.0.0
1.0.1
1.0.2
1.1.0
1.2.0
1.2.0-git
1.3.0
1.3.0-git
1.4.0
1.5.0
1.6.0

2.*

2.0.0
2.0.1
2.1.0
2.2.0
2.4.0
2.5.0
2.6.0
2.6.9
2.7.0
2.8.0
2.9.0

3.*

3.0.0
3.0.1
3.1.0
3.1.1
3.1.2
3.1.3
3.2.0
3.2.1
3.3.0
3.4.0
3.4.1
3.5.0
3.5.1
3.6.0
3.7.0
3.7.1
3.8.0
3.9.0

4.*

4.0.0
4.1.0
4.1.1
4.2.0
4.2.1
4.3.0
4.3.1
4.4.0
4.5.1

5.*

5.0.0
5.1.0
5.1.1
5.2.0
5.2.1
5.3.0
5.3.1
5.4.0
5.4.0-git
5.4.2
5.5.0
5.5.2
5.5.4
5.6.0
5.6.2
5.6.4

Other

Continuous-Windows
continuous
radare2-windows-nightly
termux

release-5.*

release-5.0.0

Database specific

vanir_signatures

[
    {
        "source": "https://github.com/radareorg/radare2/commit/10517e3ff0e609697eb8cde60ec8dc999ee5ea24",
        "id": "CVE-2022-0849-424cd6ab",
        "signature_type": "Line",
        "signature_version": "v1",
        "deprecated": false,
        "target": {
            "file": "libr/anal/arch/kvx/kvx-dis.c"
        },
        "digest": {
            "line_hashes": [
                "213765086355771058472477910705343883961",
                "89790441817078344644383730333981319044",
                "213333729231125549779341548930031751243",
                "120248620568742779005761806653451584249",
                "22537003395455939759851394673649414212",
                "191854970582966962788872313843775024303"
            ],
            "threshold": 0.9
        }
    },
    {
        "source": "https://github.com/radareorg/radare2/commit/10517e3ff0e609697eb8cde60ec8dc999ee5ea24",
        "id": "CVE-2022-0849-beb4ff89",
        "signature_type": "Function",
        "signature_version": "v1",
        "deprecated": false,
        "target": {
            "function": "r_core_anal_esil",
            "file": "libr/core/canal.c"
        },
        "digest": {
            "function_hash": "29314619787694526168489727171795055358",
            "length": 11006.0
        }
    },
    {
        "source": "https://github.com/radareorg/radare2/commit/10517e3ff0e609697eb8cde60ec8dc999ee5ea24",
        "id": "CVE-2022-0849-fc5838d2",
        "signature_type": "Line",
        "signature_version": "v1",
        "deprecated": false,
        "target": {
            "file": "libr/core/canal.c"
        },
        "digest": {
            "line_hashes": [
                "151064647522737207038002641701585694863",
                "201365850078930523467155440313041050278",
                "554038712851727814517202502238081400",
                "324338367633045011599208690070818159873",
                "56385803904105892907393414183581565035",
                "240670378416876508853000422189348650731",
                "146829273222403198238370115543802493349",
                "102031994098096621632032186568513427491",
                "87971830114110525738348029478243366818",
                "185955500592097293907552019374544936261",
                "199388977453254583941216655083914577543",
                "136946638542802779447976922196123008198",
                "46635598810570935585993285740003608110",
                "233094890459719100904538479784911914985",
                "180360847390077681308585587325680990820",
                "249563213585219776144824656136905610165",
                "286633133228900811945643277261546511320",
                "311980242921761321401146147844926487932",
                "80608826832715956418700186523814642451",
                "209390963745659760807096113845557541573",
                "86048076452562526843487165905455235786",
                "267463692106349288449640160127787313016",
                "125708555951061599578157021434035750098",
                "131403765359724178913091539440941172748",
                "323159029650079713824866077075082255280",
                "20188011992452861846917563997583082047",
                "35740221887617757029552982806479415225",
                "223925531037739692980855818059910109808",
                "17234652263441789648201845508888265416",
                "180267086269781376993331393279620372491",
                "165698561540128184225510915470279436431",
                "223774474208127358576405743499111327490",
                "246345232109034014572490130845049722191",
                "258294918034310798015531797897383954889",
                "258152791728822496364466686216350541360",
                "216906543414112680097068866529813567763",
                "315130977621343134344850210640948007791"
            ],
            "threshold": 0.9
        }
    }
]