Browse CVEs

MEDIUM 6.2 CVE-2026-31053 A double free vulnerability exists in librz/bin/format/le/le.c in the function le_load_fixup_record(). When processing malformed or circular LE fixup… Rizin Patch available Fix from $1,6002026-04-06 MEDIUM 6.1 CVE-2026-22780 Rizin is a UNIX-like reverse engineering framework and command-line toolset. Prior to 0.8.2, a heap overflow can be exploited when a malicious mach0 … Rizin 0.8.2+ Fix from $1,6002026-02-02 HIGH 7.8 CVE-2025-1788 A vulnerability, which was classified as critical, was found in rizinorg rizin up to 0.8.0. This affects the function rz_utf8_encode in the library /… Rizin after 0.8.0 Fix from $1,9502025-03-01 HIGH 7.8 CVE-2025-1786 A vulnerability was found in rizinorg rizin up to 0.7.4. It has been rated as critical. This issue affects the function msf_stream_directory_free in … Rizin 0.8.0+ Fix from $1,9502025-03-01 CRITICAL 9.1 CVE-2024-31668 rizin before v0.6.3 is vulnerable to Improper Neutralization of Special Elements via meta_set function in librz/analysis/meta. Rizin 0.6.3+ Fix from $2,3002024-12-17 MEDIUM 6.3 CVE-2024-31670 rizin before v0.6.3 is vulnerable to Buffer Overflow via create_cache_bins, read_cache_accel, and rz_dyldcache_new_buf functions in librz/bin/format/… Rizin 0.6.3+ Fix from $1,6002024-12-12 HIGH 7.5 CVE-2024-31669 rizin before Release v0.6.3 is vulnerable to Uncontrolled Resource Consumption via bin_pe_parse_imports, Pe_r_bin_pe_parse_var, and estimate_slide. Rizin 0.6.3+ Fix from $1,9502024-12-02 HIGH 7.8 CVE-2023-40022 Rizin is a UNIX-like reverse engineering framework and command-line toolset. Versions 0.6.0 and prior are vulnerable to integer overflow in `consume_… Rizin 0.6.1+ Fix from $1,9502023-08-24 MEDIUM 5.5 CVE-2023-30226 An issue was discovered in function get_gnu_verneed in rizinorg Rizin prior to 0.5.0 verneed_entry allows attackers to cause a denial of service via … Rizin 0.5.0+ Fix from $1,6002023-07-12 HIGH 7.8 CVE-2021-3674 A flaw was found in rizin. The create_section_from_phdr function allocates space for ELF section data by processing the headers. Crafted values in th… Rizin after 0.2.1 Fix from $1,9502023-03-24 HIGH 7.8 CVE-2023-27590 Rizin is a UNIX-like reverse engineering framework and command-line toolset. In version 0.5.1 and prior, converting a GDB registers profile file into… Rizin after 0.5.1 Fix from $1,9502023-03-14 HIGH 7.8 CVE-2022-36040 Rizin is a UNIX-like reverse engineering framework and command-line toolset. Versions 0.4.0 and prior are vulnerable to an out-of-bounds write when g… Rizin after 0.4.0 Fix from $1,9502022-09-06 HIGH 7.8 CVE-2022-36041 Rizin is a UNIX-like reverse engineering framework and command-line toolset. Versions 0.4.0 and prior are vulnerable to an out-of-bounds write when p… Rizin after 0.4.0 Fix from $1,9502022-09-06 HIGH 7.8 CVE-2022-36043 Rizin is a UNIX-like reverse engineering framework and command-line toolset. Versions 0.4.0 and prior are vulnerable to a double free in bobj.c:rz_bi… Rizin after 0.4.0 Fix from $1,9502022-09-06 HIGH 7.8 CVE-2022-36044 Rizin is a UNIX-like reverse engineering framework and command-line toolset. Versions 0.4.0 and prior are vulnerable to an out-of-bounds write when g… Rizin after 0.4.0 Fix from $1,9502022-09-06 HIGH 7.8 CVE-2022-36039 Rizin is a UNIX-like reverse engineering framework and command-line toolset. Versions 0.4.0 and prior are vulnerable to out-of-bounds write when pars… Rizin after 0.4.0 Fix from $1,9502022-09-06 HIGH 7.8 CVE-2022-36042 Rizin is a UNIX-like reverse engineering framework and command-line toolset. Versions 0.4.0 and prior are vulnerable to an out-of-bounds write when g… Rizin after 0.4.0 Fix from $1,9502022-09-06 MEDIUM 5.5 CVE-2021-4022 A vulnerability was found in rizin. The bug involves an ELF64 binary for the HPPA architecture. When a specially crafted binarygets analysed by rizin… Rizin after 0.3.1 Fix from $1,6002022-08-25 MEDIUM 5.5 CVE-2022-34612 Rizin v0.4.0 and below was discovered to contain an integer overflow via the function get_long_object(). This vulnerability allows attackers to cause… Rizin after 0.4.0 Fix from $1,6002022-07-27 HIGH 7.8 CVE-2021-43814 Rizin is a UNIX-like reverse engineering framework and command-line toolset. In versions up to and including 0.3.1 there is a heap-based out of bound… Rizin after 0.3.1 Fix from $1,9502021-12-13