PT-2024-24181 · Rizin · Rizin

Name of the Vulnerable Software and Affected Versions: rizin versions prior to 0.6.3 Description: The issue is related to improper neutralization of special elements via the meta set function in librz/analysis/meta. This occurs due to the improper handling of special elements. Recommendations: Fo...

CVE-2024-31668

rizin before v0.6.3 is vulnerable to Improper Neutralization of Special Elements via metaset function in librz/analysis/meta...

CVE-2024-31670

rizin before v0.6.3 is vulnerable to Buffer Overflow via createcachebins, readcacheaccel, and rzdyldcachenewbuf functions in librz/bin/format/mach0/dyldcache.c...

CVE-2024-31670

rizin before v0.6.3 is vulnerable to Buffer Overflow via createcachebins, readcacheaccel, and rzdyldcachenewbuf functions in librz/bin/format/mach0/dyldcache.c...

CVE-2024-31670

rizin before v0.6.3 is vulnerable to Buffer Overflow via createcachebins, readcacheaccel, and rzdyldcachenewbuf functions in librz/bin/format/mach0/dyldcache.c...

CVE-2024-31670

rizin before v0.6.3 is vulnerable to Buffer Overflow via createcachebins, readcacheaccel, and rzdyldcachenewbuf functions in librz/bin/format/mach0/dyldcache.c...

CVE-2024-31670

CVE-2024-31670 affects rizin before v0.6.3. The buffer overflow vulnerability is triggered via create_cache_bins, read_cache_accel, and rz_dyldcache_new_buf in librz/bin/format/mach0/dyldcache.c, with impact described as low for confidentiality, integrity, and availability per CVSS 3.1 vector. Pu...

Rizin 安全漏洞

Rizin is a free open source reverse engineering framework from the Rizin organization. It is used for analyzing binary files, disassembling code, debugging programs, as a forensic tool, as a scriptable command-line hex editor capable of opening disk files, and more. A security vulnerability exist...

CVE-2024-31669

rizin before Release v0.6.3 is vulnerable to Uncontrolled Resource Consumption via binpeparseimports, Perbinpeparsevar, and estimateslide...

CVE-2024-31669

rizin before Release v0.6.3 is vulnerable to Uncontrolled Resource Consumption via binpeparseimports, Perbinpeparsevar, and estimateslide...

CVE-2024-31669

CVE-2024-31669 affects rizin before Release v0.6.3, where Uncontrolled Resource Consumption can occur via bin_pe_parse_imports, Pe_r_bin_pe_parse_var, and estimate_slide. Multiple connected sources (OSV/NVD/Nessus/Fedora advisories) confirm the same description and identity. Impact is indicated a...

CVE-2024-31669

rizin before Release v0.6.3 is vulnerable to Uncontrolled Resource Consumption via binpeparseimports, Perbinpeparsevar, and estimateslide...

PT-2024-24182 · Rizin · Rizin

Name of the Vulnerable Software and Affected Versions: rizin versions prior to v0.6.3 Description: The issue is related to Uncontrolled Resource Consumption. It affects the bin pe parse imports, Pe r bin pe parse var, and estimate slide functions. There is no information provided about the...

CVE-2024-31669

rizin before Release v0.6.3 is vulnerable to Uncontrolled Resource Consumption via binpeparseimports, Perbinpeparsevar, and estimateslide...

Rizin 安全漏洞

Rizin is a free open source reverse engineering framework from the Rizin organization. It is used for analyzing binary files, disassembling code, debugging programs, as a forensic tool, as a scriptable command-line hex editor capable of opening disk files, and more. A security vulnerability exist...

CVE-2023-40022

Rizin is a UNIX-like reverse engineering framework and command-line toolset. Versions 0.6.0 and prior are vulnerable to integer overflow in consumecount of src/gnuv2/cplus-dem.c. The overflow check is valid logic but, is missing the modulus if the block once compiled. The compiler sees this block...

Integer overflow

Rizin is a UNIX-like reverse engineering framework and command-line toolset. Versions 0.6.0 and prior are vulnerable to integer overflow in consumecount of src/gnuv2/cplus-dem.c. The overflow check is valid logic but, is missing the modulus if the block once compiled. The compiler sees this block...

CVE-2023-40022 Rizin vulnerable to Integer Overflow in C++ demangler logic

Rizin is a UNIX-like reverse engineering framework and command-line toolset. Versions 0.6.0 and prior are vulnerable to integer overflow in consumecount of src/gnuv2/cplus-dem.c. The overflow check is valid logic but, is missing the modulus if the block once compiled. The compiler sees this block...

CVE-2023-40022

CVE-2023-40022 affects Rizin (and Cutter) with an integer overflow in consume_count inside src/gnu_v2/cplus-dem.c for versions 0.6.0 and earlier. The overflow hinges on missing modulus after a multiplication by 10, which the compiler treats as dead code, enabling the overflow. A fix was introduce...

CVE-2023-40022 Rizin vulnerable to Integer Overflow in C++ demangler logic

Rizin is a UNIX-like reverse engineering framework and command-line toolset. Versions 0.6.0 and prior are vulnerable to integer overflow in consumecount of src/gnuv2/cplus-dem.c. The overflow check is valid logic but, is missing the modulus if the block once compiled. The compiler sees this block...