Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

rizin — Vulnerabilities & Security Advisories 17

All 17 CVE vulnerabilities found in rizin, with AI-generated Chinese analysis, references, and POCs.

This page aggregates known security vulnerabilities affecting Rizin, a multi-platform binary analysis framework. It collects advisories related to memory corruption, logic errors, and input validation weaknesses. The data spans from initial public disclosures to the most recent releases. Readers can track the vendor's advisory history, understand specific weakness classes like buffer overflows or use-after-free bugs, and review the product's long-term vulnerability trends. The collection is organized by CVE and advisory identifiers to support reproducible security audits. Entries are sourced from public bulletins and standardized weakness classifications, ensuring a factual record of past defects. This aggregation facilitates comparative analysis of fix patterns and helps developers and auditors identify recurring risk categories within the Rizin ecosystem. The page does not provide remediation guidance but focuses on historical data for risk assessment and compliance tracking.

Vendor: n/a

CVE ID Title CVSS Severity Published
CVE-2026-45324 Rizin: Double free in cmd_search.c CWE-415 3.3 Low 2026-05-29
CVE-2026-45613 Rizin: Heap-buffer-overflow in OMF parser CWE-125 3.3 Low 2026-05-29
CVE-2026-22780 Rizin has a heap overflow on mach0_chained_fixups.c CWE-770 4.4 Medium 2026-02-02
CVE-2025-1788 rizinorg rizin utf8.c rz_utf8_encode heap-based overflow CWE-122 5.3 Medium 2025-03-01
CVE-2025-1786 rizinorg rizin pdb.c msf_stream_directory_free buffer overflow CWE-120 5.3 Medium 2025-03-01
CVE-2024-53256 Rizin has a command injection via RzBinInfo bclass due legacy code CWE-78 7.8 High 2024-12-23
CVE-2023-40022 Rizin vulnerable to Integer Overflow in C++ demangler logic CWE-190 7.8 High 2023-08-24
CVE-2021-3674 Rizin 缓冲区错误漏洞 CWE-119 7.8 - 2023-03-24
CVE-2023-27590 Rizin has stack-based buffer overflow when parsing GDB registers profile files CWE-121 7.8 High 2023-03-14
CVE-2022-36039 Out-of-bounds write when parsing DEX files in Rizin CWE-787 7.8 High 2022-09-06
CVE-2022-36044 Rizin Out-of-bounds Write vulnerability in Lua binary plugin CWE-787 7.8 High 2022-09-06
CVE-2022-36043 Rizin Double Free in bobj.c when using qnx binary plugin CWE-415 7.8 High 2022-09-06
CVE-2022-36042 Rizin Out-of-bounds Write vulnerability in dyld cache binary plugin CWE-787 7.8 High 2022-09-06
CVE-2022-36041 Rizin Out-of-bounds Write vulnerability in Mach-O binary plugin CWE-787 7.8 High 2022-09-06
CVE-2022-36040 Rizin Out-of-bounds Write vulnerability in pyc/marshal.c CWE-787 7.8 High 2022-09-06
CVE-2021-4022 Rizin 资源管理错误漏洞 CWE-400 5.5 - 2022-08-25
CVE-2021-43814 Heap-based OOB write when parsing dwarf DIE info in Rizin CWE-787 7.7 High 2021-12-13

All 17 known CVE vulnerabilities affecting rizin with full Chinese analysis, references, and POCs where available.