Lucene search
+L

223 matches found

OSV
OSV
added 2026/05/29 7:07 p.m.11 views

CVE-2026-45613 Rizin: Heap-buffer-overflow in OMF parser

Rizin is a UNIX-like reverse engineering framework and command-line toolset. There is a heap-buffer-overflow in librz/bin/format/omf/omf.c. This vulnerability is fixed by commit e6d0937c8a083e23ed76ccfb9f631cdc50c7af47...

3.3CVSS5.9AI score
SaveExploits0References4
CVE
CVE
added 2026/05/29 7:07 p.m.40 views

CVE-2026-45613

CVE-2026-45613 affects Rizin; a heap-buffer-overflow is reported in the OMF parser (librz/bin/format/omf/omf.c). The vulnerability is mitigated by the commit e6d0937c8a083e23ed76ccfb9f631cdc50c7af47. CVSSv3.1 vector from the entry: AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N with base score 3.3 (LOW). Th...

3.3CVSS5.8AI score0.00111EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/05/29 7:07 p.m.39 views

EUVD-2026-33423

Rizin is a UNIX-like reverse engineering framework and command-line toolset. There is a heap-buffer-overflow in librz/bin/format/omf/omf.c. This vulnerability is fixed by commit e6d0937c8a083e23ed76ccfb9f631cdc50c7af47...

3.3CVSS5.8AI score0.00111EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/05/29 7:07 p.m.60 views

CVE-2026-45613 Rizin: Heap-buffer-overflow in OMF parser

Rizin is a UNIX-like reverse engineering framework and command-line toolset. There is a heap-buffer-overflow in librz/bin/format/omf/omf.c. This vulnerability is fixed by commit e6d0937c8a083e23ed76ccfb9f631cdc50c7af47...

3.3CVSS0.00111EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/05/29 12:00 a.m.18 views

Rizin 资源管理错误漏洞

Rizin is a free, open-source reverse-engineering framework developed by the Rizin organization. It is used for analyzing binary files, disassembling code, debugging programs, as a forensics tool, and as a command-line hexadecimal editor capable of opening disk files. Rizin has a resource manageme...

3.3CVSS5.8AI score0.00101EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/05/29 12:00 a.m.24 views

Rizin 缓冲区错误漏洞

Rizin is a free, open-source reverse-engineering framework developed by the Rizin organization. It is used for analyzing binary files, disassembling code, debugging programs, as a forensics tool, and as a command-line hexadecimal editor capable of opening disk files. Rizin has a buffer overflow...

3.3CVSS6AI score0.00111EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/05/29 12:00 a.m.24 views

PT-2026-44974

Name of the Vulnerable Software and Affected Versions Rizin affected versions not specified Description Rizin is a UNIX-like reverse engineering framework and command-line toolset. A double free occurs in the byte pattern search function within the librz/core/cmd/cmd search.c file due to...

3.3CVSS6.1AI score0.00101EPSS
SaveExploits0References9
CNNVD
CNNVD
added 2026/04/06 12:00 a.m.13 views

Rizin 安全漏洞

Rizin is a free open-source reverse-engineering framework developed by the Rizin organization. It is used for analyzing binary files, disassembling code, debugging programs, as a forensics tool, and as a command-line hexadecimal editor capable of opening disk files. Rizin has a security...

6.2CVSS5.8AI score0.00149EPSS
SaveExploits1References2
SUSE CVE
SUSE CVE
added 2026/02/04 12:25 a.m.10 views

SUSE CVE-2026-22780

Rizin is a UNIX-like reverse engineering framework and command-line toolset. Prior to 0.8.2, a heap overflow can be exploited when a malicious mach0 file, having bogus entries for the dyld chained segments, is parsed by rizin. This vulnerability is fixed in 0.8.2...

4.4CVSS5.5AI score0.00179EPSS
SaveExploits0References3
OPENSUSE Linux
OPENSUSE Linux
added 2026/02/04 12:00 a.m.6 views

rizin-0.8.2-1.1 on GA media (moderate)

rizin-0.8.2-1.1 on GA media Announcement ID: openSUSE-SU-2026:10141-1 Rating: moderate Cross-References: CVE-2026-22780 CVSS scores: CVE-2026-22780 SUSE : 4.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be...

4.4CVSS5.4AI score0.00179EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2026/02/03 2:04 p.m.12 views

CVE-2026-22780

A flaw was found in Rizin, a UNIX-like reverse engineering framework. This heap overflow vulnerability can be exploited when a user parses a malicious mach0 file that contains specially crafted entries for the dynamic linker dyld chained segments. Successful exploitation could allow a remote...

6.1CVSS6.4AI score0.00179EPSS
SaveExploits0References2
OSV
OSV
added 2026/02/03 12:00 a.m.4 views

OPENSUSE-SU-2026:10141-1 rizin-0.8.2-1.1 on GA media

These are all security issues fixed in the rizin-0.8.2-1.1 package on the GA media of openSUSE Tumbleweed...

6.1CVSS5.8AI score0.00179EPSS
SaveExploits0References1
NVD
NVD
added 2026/02/02 11:16 p.m.18 views

CVE-2026-22780

Rizin is a UNIX-like reverse engineering framework and command-line toolset. Prior to 0.8.2, a heap overflow can be exploited when a malicious mach0 file, having bogus entries for the dyld chained segments, is parsed by rizin. This vulnerability is fixed in 0.8.2...

6.1CVSS0.00179EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
added 2026/02/02 8:52 p.m.4 views

CVE-2026-22780 Rizin has a heap overflow on mach0_chained_fixups.c

Rizin is a UNIX-like reverse engineering framework and command-line toolset. Prior to 0.8.2, a heap overflow can be exploited when a malicious mach0 file, having bogus entries for the dyld chained segments, is parsed by rizin. This vulnerability is fixed in 0.8.2...

4.4CVSS5.5AI score0.00179EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2026/02/02 8:52 p.m.36 views

CVE-2026-22780 Rizin has a heap overflow on mach0_chained_fixups.c

Rizin is a UNIX-like reverse engineering framework and command-line toolset. Prior to 0.8.2, a heap overflow can be exploited when a malicious mach0 file, having bogus entries for the dyld chained segments, is parsed by rizin. This vulnerability is fixed in 0.8.2...

4.4CVSS0.00179EPSS
SaveExploits0References6
CVE
CVE
added 2026/02/02 8:52 p.m.33 views

CVE-2026-22780

CVE-2026-22780 affects Rizin, a UNIX-like reverse engineering framework. Prior to version 0.8.2, parsing a malicious mach0 file with bogus entries for the dyld chained segments could trigger a heap overflow. The issue is fixed in 0.8.2; recommended remediation is to update to 0.8.2 or later.

6.1CVSS5.5AI score0.00179EPSS
SaveExploits0References6Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/02/02 8:52 p.m.4 views

CVE-2026-22780

Rizin is a UNIX-like reverse engineering framework and command-line toolset. Prior to 0.8.2, a heap overflow can be exploited when a malicious mach0 file, having bogus entries for the dyld chained segments, is parsed by rizin. This vulnerability is fixed in 0.8.2...

4.4CVSS5.5AI score0.00179EPSS
SaveExploits0References7Affected Software1
OSV
OSV
added 2026/02/02 8:52 p.m.14 views

CVE-2026-22780 Rizin has a heap overflow on mach0_chained_fixups.c

Rizin is a UNIX-like reverse engineering framework and command-line toolset. Prior to 0.8.2, a heap overflow can be exploited when a malicious mach0 file, having bogus entries for the dyld chained segments, is parsed by rizin. This vulnerability is fixed in 0.8.2...

4.4CVSS5.6AI score
SaveExploits0References8
CNNVD
CNNVD
added 2026/02/02 12:00 a.m.13 views

Rizin 安全漏洞

Rizin is a free, open-source reverse-engineering framework developed by the Rizin organization. It is used for analyzing binary files, disassembling code, debugging programs, as a forensics tool, and as a command-line hexadecimal editor capable of opening disk files. Versions of Rizin prior to...

6.1CVSS5.8AI score0.00179EPSS
SaveExploits0References6
RedhatCVE
RedhatCVE
added 2026/01/07 9:17 a.m.10 views

CVE-2025-1788

A vulnerability, which was classified as critical, was found in rizinorg rizin up to 0.8.0. This affects the function rzutf8encode in the library /librz/util/utf8.c. The manipulation leads to heap-based buffer overflow. An attack has to be approached locally. The exploit has been disclosed to the...

7.8CVSS7AI score0.00299EPSS
SaveExploits1References1
Rows per page
Query Builder