CVE-2022-34520: Radare RADARE2

Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days.

Radare2 v5.7.2 was discovered to contain a NULL pointer dereference via the function r_bin_file_xtr_load_buffer at bin/bfile.c. This vulnerability allows attackers to cause a Denial of Service (DOS) via a crafted binary file.

Affected products

• Radare RADARE2: version 5.7.2 only

Published 2022-07-22. Last modified 2026-06-17.