rizinorg

Records24All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high12CVSS 7.0–8.9

Exploited now

rizinorg records in CISA KEV

No rizinorg vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Rizin 20 records HIGH

Records

24 records

TI-2021-02614 CVE-2021-3674 · GHSA-28pv-xxcq-fr89

Memory corruption in rizin

HIGH 69

A flaw was found in rizin.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00414 Published 2023-03-24 No fix listed CWE-119

TI-2025-01540 CVE-2025-1788 · GHSA-ppmj-p8ww-6rv3

rizinorg rizin utf8.c rz_utf8_encode heap-based overflow

MEDIUM 55

A vulnerability, which was classified as critical, was found in rizinorg rizin up to 0.8.0.

CVSS 4.0MEDIUM 4.8 Local Low privileges No interaction EPSS 0.00305 Published 2025-03-01 No fix listed CWE-119

TI-2025-01538 CVE-2025-1786 · GHSA-277c-h7c7-c26c

rizinorg rizin pdb.c msf_stream_directory_free buffer overflow

MEDIUM 55

A vulnerability was found in rizinorg rizin up to 0.7.4.

CVSS 4.0MEDIUM 4.8 Local Low privileges No interaction EPSS 0.00306 Published 2025-03-01 No fix listed CWE-119

TI-2024-20906 CVE-2024-31668 · GHSA-w87m-4q2m-g66w

rizin before v0.6.3 is vulnerable to Improper Neutralization of Special Elements via…

MEDIUM 48

rizin before v0.6.3 is vulnerable to Improper Neutralization of Special Elements via meta_set function in librz/analysis/meta.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00523 Published 2024-12-17 No fix listed CWE-78

TI-2024-20907 CVE-2024-31669 · GHSA-pcg3-64vv-w6jf

rizin before Release v0.6.3 is vulnerable to Uncontrolled Resource Consumption via…

LOW 39

rizin before Release v0.6.3 is vulnerable to Uncontrolled Resource Consumption via bin_pe_parse_imports, Pe_r_bin_pe_parse_var, and estimate_slide.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00471 Published 2024-12-02 No fix listed CWE-770

TI-2024-35719 CVE-2024-53256

Rizin has a command injection via RzBinInfo bclass due legacy code

LOW 38

Rizin is a UNIX-like reverse engineering framework and command-line toolset.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01202 Published 2024-12-23 Fixed in 0.7.4 CWE-78

TI-2023-20912 CVE-2023-40022

Rizin vulnerable to Integer Overflow in C++ demangler logic

LOW 36

Rizin is a UNIX-like reverse engineering framework and command-line toolset.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00291 Published 2023-08-24 Fixed in 0.6.1 CWE-190

TI-2023-12300 CVE-2023-27590

Rizin has stack-based buffer overflow when parsing GDB registers profile files

LOW 36

Rizin is a UNIX-like reverse engineering framework and command-line toolset.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00315 Published 2023-03-14 No fix listed CWE-120

TI-2022-16469 CVE-2022-36044

Rizin Out-of-bounds Write vulnerability in Lua binary plugin

LOW 36

Rizin is a UNIX-like reverse engineering framework and command-line toolset.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00386 Published 2022-09-06 No fix listed CWE-787

TI-2022-16468 CVE-2022-36043

Rizin Double Free in bobj.c when using qnx binary plugin

LOW 36

Rizin is a UNIX-like reverse engineering framework and command-line toolset.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00386 Published 2022-09-06 No fix listed CWE-415

TI-2022-16467 CVE-2022-36042

Rizin Out-of-bounds Write vulnerability in dyld cache binary plugin

LOW 36

Rizin is a UNIX-like reverse engineering framework and command-line toolset.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.0038 Published 2022-09-06 No fix listed CWE-787

TI-2022-16466 CVE-2022-36041

Rizin Out-of-bounds Write vulnerability in Mach-O binary plugin

LOW 36

Rizin is a UNIX-like reverse engineering framework and command-line toolset.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00386 Published 2022-09-06 No fix listed CWE-787

TI-2022-16465 CVE-2022-36040

Rizin Out-of-bounds Write vulnerability in pyc/marshal.c

LOW 36

Rizin is a UNIX-like reverse engineering framework and command-line toolset.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00386 Published 2022-09-06 No fix listed CWE-787

TI-2022-16464 CVE-2022-36039

Out-of-bounds write when parsing DEX files in Rizin

LOW 36

Rizin is a UNIX-like reverse engineering framework and command-line toolset.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00387 Published 2022-09-06 No fix listed CWE-787

TI-2021-19620 CVE-2021-43814

Heap-based OOB write when parsing dwarf DIE info in Rizin

LOW 36

Rizin is a UNIX-like reverse engineering framework and command-line toolset.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00874 Published 2021-12-13 No fix listed CWE-787

TI-2024-20908 CVE-2024-31670 · GHSA-cvmq-g63x-rjjh

rizin before v0.6.3 is vulnerable to Buffer Overflow via create_cache_bins…

LOW 28

rizin before v0.6.3 is vulnerable to Buffer Overflow via create_cache_bins, read_cache_accel, and rz_dyldcache_new_buf functions in librz/bin/format/mach0/dyldcache.c.

CVSS 3.1MEDIUM 6.3 Network Low privileges No interaction EPSS 0.00284 Published 2024-12-12 No fix listed CWE-120

TI-2026-23833 CVE-2026-31053 · GHSA-h848-fw25-hp2w

A double free vulnerability exists in librz/bin/format/le/le.c in the function…

LOW 27

A double free vulnerability exists in librz/bin/format/le/le.c in the function le_load_fixup_record().

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.00154 Published 2026-04-06 No fix listed CWE-415

TI-2026-18298 CVE-2026-22780

Rizin has a heap overflow on mach0_chained_fixups.c

LOW 27

Rizin is a UNIX-like reverse engineering framework and command-line toolset.

CVSS 3.1MEDIUM 6.1 Local No auth User interaction EPSS 0.00204 Published 2026-02-02 Fixed in 0.8.2 CWE-770

TI-2023-14184 CVE-2023-30226 · GHSA-cp8q-fxv9-rfj5

An issue was discovered in function get_gnu_verneed in rizinorg Rizin prior to 0.5.0…

LOW 25

An issue was discovered in function get_gnu_verneed in rizinorg Rizin prior to 0.5.0 verneed_entry allows attackers to cause a denial of service via crafted elf file.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00351 Published 2023-07-12 No fix listed CWE-834

TI-2022-15450 CVE-2022-34612 · GHSA-hvpp-g2cx-76qq

Rizin v0.4.0 and below was discovered to contain an integer overflow via the function…

LOW 25

Rizin v0.4.0 and below was discovered to contain an integer overflow via the function get_long_object().

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00374 Published 2022-07-27 No fix listed CWE-190

TI-2021-02913 CVE-2021-4022 · GHSA-5wm3-rhr5-rwmm

Uncontrolled resource consumption in rizin

LOW 25

A vulnerability was found in rizin.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00305 Published 2022-08-25 No fix listed CWE-400

TI-2026-33357 CVE-2026-45612

rz-libdemangle: Out of bound read in rust demangler

LOW 24

rz-libdemangle is a Rizin library for demangling symbols.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00174 Published 2026-07-16 Fixed in 6bf56d32b32547ae4cb069ccfc2d2b6c7b63a4cb CWE-125

TI-2026-33358 CVE-2026-45613

Rizin: Heap-buffer-overflow in OMF parser

LOW 15

Rizin is a UNIX-like reverse engineering framework and command-line toolset.

CVSS 3.1LOW 3.3 Local No auth User interaction EPSS 0.00111 Published 2026-05-29 No fix listed CWE-125

TI-2026-33122 CVE-2026-45324

Rizin: Double free in cmd_search.c

LOW 15

Rizin is a UNIX-like reverse engineering framework and command-line toolset.

CVSS 3.1LOW 3.3 Physical Low privileges User interaction EPSS 0.00101 Published 2026-05-29 Fixed in 045fff363b42b8a6dda8ad5229c29ec3267e7dbe CWE-415

Open these records in search →

Critical	1
High	12
Medium	9
Low	2
No CVSS	0