{"id":"CVE-2022-28072","details":"A heap buffer overflow in r_read_le32 function in radare25.4.2 and 5.4.0.","modified":"2026-08-27T08:40:45.473132Z","published":"2023-08-22T00:00:00Z","database_specific":{"cna_assigner":"mitre","osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/28xxx/CVE-2022-28072.json"},"references":[{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/28xxx/CVE-2022-28072.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-28072"},{"type":"FIX","url":"https://github.com/radareorg/radare2/commit/027cd9b7274988bb1af866539ba6c2fa2ff63e45"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/radareorg/radare2","events":[{"introduced":"df953a40887aa5dc947ca3c08d70e39359f9c0e3"},{"fixed":"027cd9b7274988bb1af866539ba6c2fa2ff63e45"}],"database_specific":{"extracted_events":[{"introduced":"5.4.0"},{"last_affected":"5.4.0"},{"introduced":"5.4.2"},{"last_affected":"5.4.2"}],"source":["CPE_STRING","REFERENCES"],"cpe":["cpe:2.3:a:radare:radare2:5.4.0:*:*:*:*:*:*:*","cpe:2.3:a:radare:radare2:5.4.2:*:*:*:*:*:*:*"]}}],"versions":["5.4.0","5.4.2","5.4.0-git"],"database_specific":{"vanir_signatures_modified":"2026-08-27T08:40:45Z","vanir_signatures":[{"deprecated":false,"digest":{"line_hashes":["78299648041798858780966479822655929575","336844636290159360503364121036148471201","188951349424139418795589323153220133890","78883232348777605426068695389747290352","262204588552581859405766821768730420873"],"threshold":0.9},"id":"CVE-2022-28072-62a5f74d","signature_type":"Line","signature_version":"v1","source":"https://github.com/radareorg/radare2/commit/027cd9b7274988bb1af866539ba6c2fa2ff63e45","target":{"file":"libr/anal/p/anal_hexagon.c"}},{"digest":{"function_hash":"83706570118820901373854831190864618648","length":360},"id":"CVE-2022-28072-da1e6ae8","signature_type":"Function","signature_version":"v1","source":"https://github.com/radareorg/radare2/commit/027cd9b7274988bb1af866539ba6c2fa2ff63e45","target":{"function":"hexagon_v6_op","file":"libr/anal/p/anal_hexagon.c"},"deprecated":false}],"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-28072.json"}}],"schema_version":"1.9.0"}