CVE-2022-36041highCWE-787

CVE-2022-36041: fallo de gravedad alta en rizinorg rizin

Rizin Out-of-bounds Write vulnerability in Mach-O binary plugin

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear rizin

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

21Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 7.8epss 0.4%
Rizin is a UNIX-like reverse engineering framework and command-line toolset. Versions 0.4.0 and prior are vulnerable to an out-of-bounds write when parsing Mach-O files. A user opening a malicious Mach-O file could be affected by this vulnerability, allowing an attacker to execute code on the user's machine. Commit number 7323e64d68ecccfb0ed3ee480f704384c38676b2 contains a patch.
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Productos afectados
rizinorg · rizin
CVEs relacionadas — rizinorg rizin

En el mismo producto, de las más peligrosas a las menos.

CVE-2024-53256HIGHRizin has a command injection via RzBinInfo bclass due legacy codeEPSS 1.2%CVE-2021-43814HIGHHeap-based OOB write when parsing dwarf DIE info in RizinEPSS 0.9%CVE-2022-36039HIGHOut-of-bounds write when parsing DEX files in RizinEPSS 0.4%CVE-2022-36044HIGHRizin Out-of-bounds Write vulnerability in Lua binary pluginEPSS 0.4%CVE-2022-36043HIGHRizin Double Free in bobj.c when using qnx binary pluginEPSS 0.4%CVE-2022-36040HIGHRizin Out-of-bounds Write vulnerability in pyc/marshal.cEPSS 0.4%