Radare2 · Radare2 · CVE-2022-1451
**Name of the Vulnerable Software and Affected Versions**
radare2 versions prior to 5.7.0
**Description**
The issue is related to an out-of-bounds read in the `r bin java constant value attr new` function. This bug causes the program to read data past the end of the intended buffer, potentially allowing attackers to read sensitive information from other memory locations or cause a crash.
**Recommendations**
For versions prior to 5.7.0, update to version 5.7.0 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive information that could be exposed through this out-of-bounds read until a patch is applied.