CVE-2022-0522: Fedoraproject Fedora

High severity, CVSS 7.1. EPSS: 1% chance of exploitation in the next 30 days.

Access of Memory Location Before Start of Buffer in NPM radare2.js prior to 5.6.2.

Affected products

• Fedoraproject Fedora: version 35 only; version 36 only
• Radare RADARE2: before 5.6.2 (fixed in 5.6.2)

Published 2022-02-08. Last modified 2026-06-17.