rizinorg vulnerabilities

CVEs per yearBy the year they were published

1. 20211
2. 20226
3. 20232
4. 20241
5. 20252
6. 20264

Newest CVEs

• CVE-2026-45612

  rz-libdemangle: Out of bound read in rust demangler

  rizinorg · rz-libdemangle

  Medium5.5
• CVE-2026-45324

  Rizin: Double free in cmd_search.c

  rizinorg · rizin

  Low3.3
• CVE-2026-45613

  Rizin: Heap-buffer-overflow in OMF parser

  rizinorg · rizin

  Low3.3
• CVE-2026-22780

  Rizin has a heap overflow on mach0_chained_fixups.c

  rizinorg · rizin

  Medium4.4
• CVE-2025-1788

  rizinorg rizin utf8.c rz_utf8_encode heap-based overflow

  rizinorg · rizin

  Medium4.8
• CVE-2025-1786

  rizinorg rizin pdb.c msf_stream_directory_free buffer overflow

  rizinorg · rizin

  Medium4.8
• CVE-2024-53256

  Rizin has a command injection via RzBinInfo bclass due legacy code

  rizinorg · rizin

  High7.8
• CVE-2023-40022

  Rizin vulnerable to Integer Overflow in C++ demangler logic

  rizinorg · rizin

  High7.8
• CVE-2023-27590

  Rizin has stack-based buffer overflow when parsing GDB registers profile files

  rizinorg · rizin

  High7.8
• CVE-2022-36039

  Out-of-bounds write when parsing DEX files in Rizin

  rizinorg · rizin

  High7.8