CVE-2022-0518

Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.6.2.

• CWE-122
• CWE-787

• https://github.com/radareorg/radare2/commit/9650e3c352f675687bf6c6f65ff2c4a3d0e288faPatch, Third Party Advisory
• https://huntr.dev/bounties/10051adf-7ddc-4042-8fd0-8e9e0c5b1184Exploit, Patch, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BZTIMAS53YT66FUS4QHQAFRJOBMUFG6D/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/E6YBRQ3UCFWJVSOYIKPVUDASZ544TFND/
• https://github.com/radareorg/radare2/commit/9650e3c352f675687bf6c6f65ff2c4a3d0e288faPatch, Third Party Advisory
• https://huntr.dev/bounties/10051adf-7ddc-4042-8fd0-8e9e0c5b1184Exploit, Patch, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BZTIMAS53YT66FUS4QHQAFRJOBMUFG6D/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/E6YBRQ3UCFWJVSOYIKPVUDASZ544TFND/

Published

Feb 8, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-0512Authorization Bypass Through User-Controlled Key in NPM url-…5.3
• CVE-2022-0513The WP Statistics WordPress plugin is vulnerable to SQL Inje…7.5
• CVE-2022-0514Business Logic Errors in GitHub repository crater-invoice/cr…6.5
• CVE-2022-0515Cross-Site Request Forgery (CSRF) in GitHub repository crate…4.3
• CVE-2022-0516A vulnerability was found in kvm_s390_guest_sida_op in the a…7.8
• CVE-2022-0517Mozilla VPN can load an OpenSSL configuration file from an u…7.8
• CVE-2022-0519Buffer Access with Incorrect Length Value in GitHub reposito…7.1
• CVE-2022-0520Use After Free in NPM radare2.js prior to 5.6.2.7.8
• CVE-2022-0521Access of Memory Location After End of Buffer in GitHub repo…7.1
• CVE-2022-0522Access of Memory Location Before Start of Buffer in NPM rada…7.1
• CVE-2022-0523Use After Free in GitHub repository radareorg/radare2 prior …7.8
• CVE-2022-0524Business Logic Errors in GitHub repository publify/publify p…7.5