CVE-2024-31669

rizin before Release v0.6.3 is vulnerable to Uncontrolled Resource Consumption via binpeparseimports, Perbinpeparsevar, and estimateslide...

PT-2024-24182 · Rizin · Rizin

Name of the Vulnerable Software and Affected Versions: rizin versions prior to v0.6.3 Description: The issue is related to Uncontrolled Resource Consumption. It affects the bin pe parse imports, Pe r bin pe parse var, and estimate slide functions. There is no information provided about the...

CVE-2024-31669

rizin before Release v0.6.3 is vulnerable to Uncontrolled Resource Consumption via binpeparseimports, Perbinpeparsevar, and estimateslide...

Rizin 安全漏洞

Rizin is a free open source reverse engineering framework from the Rizin organization. It is used for analyzing binary files, disassembling code, debugging programs, as a forensic tool, as a scriptable command-line hex editor capable of opening disk files, and more. A security vulnerability exist...

CVE-2023-40022

Rizin is a UNIX-like reverse engineering framework and command-line toolset. Versions 0.6.0 and prior are vulnerable to integer overflow in consumecount of src/gnuv2/cplus-dem.c. The overflow check is valid logic but, is missing the modulus if the block once compiled. The compiler sees this block...

Integer overflow

Rizin is a UNIX-like reverse engineering framework and command-line toolset. Versions 0.6.0 and prior are vulnerable to integer overflow in consumecount of src/gnuv2/cplus-dem.c. The overflow check is valid logic but, is missing the modulus if the block once compiled. The compiler sees this block...

CVE-2023-40022 Rizin vulnerable to Integer Overflow in C++ demangler logic

Rizin is a UNIX-like reverse engineering framework and command-line toolset. Versions 0.6.0 and prior are vulnerable to integer overflow in consumecount of src/gnuv2/cplus-dem.c. The overflow check is valid logic but, is missing the modulus if the block once compiled. The compiler sees this block...

CVE-2023-40022

CVE-2023-40022 affects Rizin (and Cutter) with an integer overflow in consume_count inside src/gnu_v2/cplus-dem.c for versions 0.6.0 and earlier. The overflow hinges on missing modulus after a multiplication by 10, which the compiler treats as dead code, enabling the overflow. A fix was introduce...

CVE-2023-40022 Rizin vulnerable to Integer Overflow in C++ demangler logic

Rizin is a UNIX-like reverse engineering framework and command-line toolset. Versions 0.6.0 and prior are vulnerable to integer overflow in consumecount of src/gnuv2/cplus-dem.c. The overflow check is valid logic but, is missing the modulus if the block once compiled. The compiler sees this block...

CVE-2023-40022 Rizin vulnerable to Integer Overflow in C++ demangler logic

Rizin is a UNIX-like reverse engineering framework and command-line toolset. Versions 0.6.0 and prior are vulnerable to integer overflow in consumecount of src/gnuv2/cplus-dem.c. The overflow check is valid logic but, is missing the modulus if the block once compiled. The compiler sees this block...

Rizin 输入验证错误漏洞

Rizin is a free open source reverse engineering framework from the Rizin organization. It is used for analyzing binary files, disassembling code, debugging programs, as a forensic tool, as a scriptable command-line hex editor capable of opening disk files, and more. An input validation error...

Fedora: Security Advisory for rizin (FEDORA-2023-3dc1f9ba12)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory for cutter-re (FEDORA-2023-3dc1f9ba12)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2023-30226

An issue was discovered in function getgnuverneed in rizinorg Rizin prior to 0.5.0 verneedentry allows attackers to cause a denial of service via crafted elf file...

[SECURITY] Fedora 38 Update: rizin-0.5.2-1.fc38.2

Rizin is a free and open-source Reverse Engineering framework, providing a complete binary analysis experience with features like Disassembler, Hexadecimal editor, Emulation, Binary inspection, Debugger, and more. Rizin is a fork of radare2 with a focus on usability, working features and co de...

[SECURITY] Fedora 38 Update: cutter-re-2.2.1-1.fc38

Cutter is a Qt and C++ GUI for Rizin. Its goal is making an advanced, customizable and FOSS reverse-engineering platform while keeping the user experience at mind. Cutter is created by reverse engineers for reverse engineers...

CVE-2023-30226

An issue was discovered in function getgnuverneed in rizinorg Rizin prior to 0.5.0 verneedentry allows attackers to cause a denial of service via crafted elf file...

CVE-2023-30226

Rizin vulnerability CVE-2023-30226 affects the function get_gnu_verneed in Rizin prior to 0.5.0; verneed_entry can be triggered by crafted ELF files to cause denial of service. The description indicates an old version is affected; no public exploit details are provided in the documents. The exact...

CVE-2023-30226

An issue was discovered in function getgnuverneed in rizinorg Rizin prior to 0.5.0 verneedentry allows attackers to cause a denial of service via crafted elf file...

Rizin 安全漏洞

Rizin is a free open source reverse engineering framework from the Rizin organization. It is used for analyzing binary files, disassembling code, debugging programs, as a forensic tool, as a scriptable command-line hex editor capable of opening disk files, and more. A security vulnerability exist...