{"id":"CVE-2022-28073","details":"A use after free in r_reg_set_value function in radare2 5.4.2 and 5.4.0.","modified":"2026-08-19T15:43:26.803677Z","published":"2023-08-22T00:00:00Z","database_specific":{"cna_assigner":"mitre","osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/28xxx/CVE-2022-28073.json"},"references":[{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/28xxx/CVE-2022-28073.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-28073"},{"type":"FIX","url":"https://github.com/radareorg/radare2/commit/59a9dfb60acf8b5c0312061cffd9693fc9526053"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/radareorg/radare2","events":[{"introduced":"df953a40887aa5dc947ca3c08d70e39359f9c0e3"},{"fixed":"59a9dfb60acf8b5c0312061cffd9693fc9526053"}],"database_specific":{"cpe":["cpe:2.3:a:radare:radare2:5.4.0:*:*:*:*:*:*:*","cpe:2.3:a:radare:radare2:5.4.2:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"5.4.0"},{"last_affected":"5.4.0"},{"introduced":"5.4.2"},{"last_affected":"5.4.2"}],"source":["CPE_STRING","REFERENCES"]}}],"versions":["5.4.0","5.4.2","5.4.0-git"],"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-28073.json","vanir_signatures_modified":"2026-08-19T15:43:26Z","vanir_signatures":[{"digest":{"line_hashes":["107965403694139141800883347947913532701","90858975693036788028608609588124022265","91098963071992624841683449385395680558","22767473244447740504981729120555308088","247000964506623080778811502719665681668","276733396430313155747190658361066390962","226299340826807465848498720845665177618","112396456098419320478828881307016113626","242253239353985117994160421411365598951","337369892757591744372938417976276276080","75895697324596618579084262595050099514","302827732959799927538842265254498105694","166714499320889079419288572959143241326"],"threshold":0.9},"id":"CVE-2022-28073-48ad4089","signature_type":"Line","signature_version":"v1","source":"https://github.com/radareorg/radare2/commit/59a9dfb60acf8b5c0312061cffd9693fc9526053","target":{"file":"libr/core/cmd_anal.c"},"deprecated":false},{"signature_version":"v1","source":"https://github.com/radareorg/radare2/commit/59a9dfb60acf8b5c0312061cffd9693fc9526053","target":{"file":"libr/core/anal_tp.c","function":"r_core_anal_type_match"},"deprecated":false,"digest":{"function_hash":"285989314592378426913415680164616220717","length":8648},"id":"CVE-2022-28073-78127409","signature_type":"Function"},{"target":{"function":"r_reg_set_value","file":"libr/reg/rvalue.c"},"deprecated":false,"digest":{"length":1864,"function_hash":"204028207422224448207553106569323567684"},"id":"CVE-2022-28073-9d2a54cd","signature_type":"Function","signature_version":"v1","source":"https://github.com/radareorg/radare2/commit/59a9dfb60acf8b5c0312061cffd9693fc9526053"},{"signature_type":"Line","signature_version":"v1","source":"https://github.com/radareorg/radare2/commit/59a9dfb60acf8b5c0312061cffd9693fc9526053","target":{"file":"libr/reg/rvalue.c"},"deprecated":false,"digest":{"line_hashes":["318729812593611023103554930368898728989","49773521259689398108543093835176613012","51529064426519814179888507050204380699","104606128581635823925979556556726119891","246242639589626985321667502764054435175","245829021877674134125367048357940842841","181365753083643883803333819815096423015"],"threshold":0.9},"id":"CVE-2022-28073-edaa3853"},{"target":{"file":"libr/core/cmd_anal.c","function":"cmd_anal_reg"},"deprecated":false,"digest":{"function_hash":"338253653074750491800978514334914077827","length":8545},"id":"CVE-2022-28073-f38bb3f2","signature_type":"Function","signature_version":"v1","source":"https://github.com/radareorg/radare2/commit/59a9dfb60acf8b5c0312061cffd9693fc9526053"},{"signature_type":"Line","signature_version":"v1","source":"https://github.com/radareorg/radare2/commit/59a9dfb60acf8b5c0312061cffd9693fc9526053","target":{"file":"libr/core/anal_tp.c"},"deprecated":false,"digest":{"line_hashes":["217162351361486105630499451692671626250","180232910030786710389110733687392630590","323015404115345229691306406559461738326","128744477728164312191741660526391552979","13015060849857345863188219995292712546","307608947464186904513035752868391610898","225526161422989738646426351772365374436","17471026006023902788232861735162612741","41965731703346872902157036384796507205","337421225254291427843929029252686127228","168989720800178328957008276514095732168","245656965178474216744987159939380588043","22700095761782948234199737776342375501","135889908066765768867101124481055821515","38696921190626502429738861145782385651","286409936264508199882249355947142546207","89791071719949603264578135948408064814"],"threshold":0.9},"id":"CVE-2022-28073-fce9af89"}]}}],"schema_version":"1.9.0"}