CVE-2026-45324: fallo de gravedad baja en rizinorg rizin
Rizin: Double free in cmd_search.c
Publicada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
8Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 3.3epss 0.1%
Rizin is a UNIX-like reverse engineering framework and command-line toolset. There is a double free in librz/core/cmd/cmd_search.c:byte_pattern_search() due wrong pointer ownership declared. This vulnerability is fixed by commit 045fff363b42b8a6dda8ad5229c29ec3267e7dbe.
CVSS:3.1/AV:P/AC:H/PR:L/UI:R/S:C/C:N/I:L/A:L
Productos afectados
rizinorg · rizinCVEs relacionadas — rizinorg rizin
En el mismo producto, de las más peligrosas a las menos.
CVE-2024-53256HIGHRizin has a command injection via RzBinInfo bclass due legacy codeEPSS 1.2%CVE-2021-43814HIGHHeap-based OOB write when parsing dwarf DIE info in RizinEPSS 0.9%CVE-2022-36039HIGHOut-of-bounds write when parsing DEX files in RizinEPSS 0.4%CVE-2022-36044HIGHRizin Out-of-bounds Write vulnerability in Lua binary pluginEPSS 0.4%CVE-2022-36043HIGHRizin Double Free in bobj.c when using qnx binary pluginEPSS 0.4%CVE-2022-36041HIGHRizin Out-of-bounds Write vulnerability in Mach-O binary pluginEPSS 0.4%