TI-2021-02614 CVE-2021-3674 · GHSA-28pv-xxcq-fr89
Memory corruption in rizin
Priority HIGH 69
A flaw was found in rizin.
rizinorg
Records24All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high12CVSS 7.0–8.9
Exploited now
rizinorg records in CISA KEVNo rizinorg vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
20 records in Rizin · all components
TI-2025-01540 CVE-2025-1788 · GHSA-ppmj-p8ww-6rv3
rizinorg rizin utf8.c rz_utf8_encode heap-based overflow
Priority MEDIUM 55
A vulnerability, which was classified as critical, was found in rizinorg rizin up to 0.8.0.
TI-2025-01538 CVE-2025-1786 · GHSA-277c-h7c7-c26c
rizinorg rizin pdb.c msf_stream_directory_free buffer overflow
Priority MEDIUM 55
A vulnerability was found in rizinorg rizin up to 0.7.4.
TI-2024-20906 CVE-2024-31668 · GHSA-w87m-4q2m-g66w
rizin before v0.6.3 is vulnerable to Improper Neutralization of Special Elements via…
Priority MEDIUM 48
rizin before v0.6.3 is vulnerable to Improper Neutralization of Special Elements via meta_set function in librz/analysis/meta.
TI-2024-20907 CVE-2024-31669 · GHSA-pcg3-64vv-w6jf
rizin before Release v0.6.3 is vulnerable to Uncontrolled Resource Consumption via…
Priority LOW 39
rizin before Release v0.6.3 is vulnerable to Uncontrolled Resource Consumption via bin_pe_parse_imports, Pe_r_bin_pe_parse_var, and estimate_slide.
Priority LOW 36
Rizin is a UNIX-like reverse engineering framework and command-line toolset.
TI-2023-12300 CVE-2023-27590
Rizin has stack-based buffer overflow when parsing GDB registers profile files
Priority LOW 36
Rizin is a UNIX-like reverse engineering framework and command-line toolset.
Priority LOW 36
Rizin is a UNIX-like reverse engineering framework and command-line toolset.
Priority LOW 36
Rizin is a UNIX-like reverse engineering framework and command-line toolset.
Priority LOW 36
Rizin is a UNIX-like reverse engineering framework and command-line toolset.
Priority LOW 36
Rizin is a UNIX-like reverse engineering framework and command-line toolset.
Priority LOW 36
Rizin is a UNIX-like reverse engineering framework and command-line toolset.
Priority LOW 36
Rizin is a UNIX-like reverse engineering framework and command-line toolset.
Priority LOW 36
Rizin is a UNIX-like reverse engineering framework and command-line toolset.
TI-2024-20908 CVE-2024-31670 · GHSA-cvmq-g63x-rjjh
rizin before v0.6.3 is vulnerable to Buffer Overflow via create_cache_bins…
Priority LOW 28
rizin before v0.6.3 is vulnerable to Buffer Overflow via create_cache_bins, read_cache_accel, and rz_dyldcache_new_buf functions in librz/bin/format/mach0/dyldcache.c.
TI-2026-23833 CVE-2026-31053 · GHSA-h848-fw25-hp2w
A double free vulnerability exists in librz/bin/format/le/le.c in the function…
Priority LOW 27
A double free vulnerability exists in librz/bin/format/le/le.c in the function le_load_fixup_record().
Priority LOW 27
Rizin is a UNIX-like reverse engineering framework and command-line toolset.
TI-2023-14184 CVE-2023-30226 · GHSA-cp8q-fxv9-rfj5
An issue was discovered in function get_gnu_verneed in rizinorg Rizin prior to 0.5.0…
Priority LOW 25
An issue was discovered in function get_gnu_verneed in rizinorg Rizin prior to 0.5.0 verneed_entry allows attackers to cause a denial of service via crafted elf file.
TI-2022-15450 CVE-2022-34612 · GHSA-hvpp-g2cx-76qq
Rizin v0.4.0 and below was discovered to contain an integer overflow via the function…
Priority LOW 25
Rizin v0.4.0 and below was discovered to contain an integer overflow via the function get_long_object().
TI-2021-02913 CVE-2021-4022 · GHSA-5wm3-rhr5-rwmm
Uncontrolled resource consumption in rizin
Priority LOW 25
A vulnerability was found in rizin.