Vulnerability index

Browse CVEs

20 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Rizin MEDIUM 6.2
CVE-2026-31053

A double free vulnerability exists in librz/bin/format/le/le.c in the function le_load_fixup_record(). When processing malformed or circular LE fixup…

Patch available
Fix from $1,600 2026-04-06
Rizin MEDIUM 6.1
CVE-2026-22780

Rizin is a UNIX-like reverse engineering framework and command-line toolset. Prior to 0.8.2, a heap overflow can be exploited when a malicious mach0 …

Fix: 0.8.2+
Fix from $1,600 2026-02-02
Rizin HIGH 7.8
CVE-2025-1788

A vulnerability, which was classified as critical, was found in rizinorg rizin up to 0.8.0. This affects the function rz_utf8_encode in the library /…

Fix: after 0.8.0
Fix from $1,950 2025-03-01
Rizin HIGH 7.8
CVE-2025-1786

A vulnerability was found in rizinorg rizin up to 0.7.4. It has been rated as critical. This issue affects the function msf_stream_directory_free in …

Fix: 0.8.0+
Fix from $1,950 2025-03-01
Rizin CRITICAL 9.1
CVE-2024-31668

rizin before v0.6.3 is vulnerable to Improper Neutralization of Special Elements via meta_set function in librz/analysis/meta.

Fix: 0.6.3+
Fix from $2,300 2024-12-17
Rizin MEDIUM 6.3
CVE-2024-31670

rizin before v0.6.3 is vulnerable to Buffer Overflow via create_cache_bins, read_cache_accel, and rz_dyldcache_new_buf functions in librz/bin/format/…

Fix: 0.6.3+
Fix from $1,600 2024-12-12
Rizin HIGH 7.5
CVE-2024-31669

rizin before Release v0.6.3 is vulnerable to Uncontrolled Resource Consumption via bin_pe_parse_imports, Pe_r_bin_pe_parse_var, and estimate_slide.

Fix: 0.6.3+
Fix from $1,950 2024-12-02
Rizin HIGH 7.8
CVE-2023-40022

Rizin is a UNIX-like reverse engineering framework and command-line toolset. Versions 0.6.0 and prior are vulnerable to integer overflow in `consume_…

Fix: 0.6.1+
Fix from $1,950 2023-08-24
Rizin MEDIUM 5.5
CVE-2023-30226

An issue was discovered in function get_gnu_verneed in rizinorg Rizin prior to 0.5.0 verneed_entry allows attackers to cause a denial of service via …

Fix: 0.5.0+
Fix from $1,600 2023-07-12
Rizin HIGH 7.8
CVE-2021-3674

A flaw was found in rizin. The create_section_from_phdr function allocates space for ELF section data by processing the headers. Crafted values in th…

Fix: after 0.2.1
Fix from $1,950 2023-03-24
Rizin HIGH 7.8
CVE-2023-27590

Rizin is a UNIX-like reverse engineering framework and command-line toolset. In version 0.5.1 and prior, converting a GDB registers profile file into…

Fix: after 0.5.1
Fix from $1,950 2023-03-14
Rizin HIGH 7.8
CVE-2022-36040

Rizin is a UNIX-like reverse engineering framework and command-line toolset. Versions 0.4.0 and prior are vulnerable to an out-of-bounds write when g…

Fix: after 0.4.0
Fix from $1,950 2022-09-06
Rizin HIGH 7.8
CVE-2022-36041

Rizin is a UNIX-like reverse engineering framework and command-line toolset. Versions 0.4.0 and prior are vulnerable to an out-of-bounds write when p…

Fix: after 0.4.0
Fix from $1,950 2022-09-06
Rizin HIGH 7.8
CVE-2022-36043

Rizin is a UNIX-like reverse engineering framework and command-line toolset. Versions 0.4.0 and prior are vulnerable to a double free in bobj.c:rz_bi…

Fix: after 0.4.0
Fix from $1,950 2022-09-06
Rizin HIGH 7.8
CVE-2022-36044

Rizin is a UNIX-like reverse engineering framework and command-line toolset. Versions 0.4.0 and prior are vulnerable to an out-of-bounds write when g…

Fix: after 0.4.0
Fix from $1,950 2022-09-06
Rizin HIGH 7.8
CVE-2022-36039

Rizin is a UNIX-like reverse engineering framework and command-line toolset. Versions 0.4.0 and prior are vulnerable to out-of-bounds write when pars…

Fix: after 0.4.0
Fix from $1,950 2022-09-06
Rizin HIGH 7.8
CVE-2022-36042

Rizin is a UNIX-like reverse engineering framework and command-line toolset. Versions 0.4.0 and prior are vulnerable to an out-of-bounds write when g…

Fix: after 0.4.0
Fix from $1,950 2022-09-06
Rizin MEDIUM 5.5
CVE-2021-4022

A vulnerability was found in rizin. The bug involves an ELF64 binary for the HPPA architecture. When a specially crafted binarygets analysed by rizin…

Fix: after 0.3.1
Fix from $1,600 2022-08-25
Rizin MEDIUM 5.5
CVE-2022-34612

Rizin v0.4.0 and below was discovered to contain an integer overflow via the function get_long_object(). This vulnerability allows attackers to cause…

Fix: after 0.4.0
Fix from $1,600 2022-07-27
Rizin HIGH 7.8
CVE-2021-43814

Rizin is a UNIX-like reverse engineering framework and command-line toolset. In versions up to and including 0.3.1 there is a heap-based out of bound…

Fix: after 0.3.1
Fix from $1,950 2021-12-13