CVE-2026-31053

A double free vulnerability exists in librz/bin/format/le/le.c in the function leloadfixuprecord. When processing malformed or circular LE fixup chains, relocation entries may be freed multiple times during error handling. A specially crafted LE binary can trigger heap corruption and cause the...

CVE-2026-31053

The CVE-2026-31053 issue affects librz’s LE format handling, specifically the function le_load_fixup_record() in librz/bin/format/le/le.c. When processing malformed or circular LE fixup chains, relocation entries may be freed multiple times during error handling, causing heap corruption and a con...