rizinorg — Vulnerabilities & Security Advisories 16

Rizinorg develops the reverse engineering framework Rizin, primarily used for binary analysis and disassembly. Historically, its vulnerabilities have included remote code execution, cross-site scripting, and privilege escalation flaws, often stemming from input validation failures and insecure memory handling. The project maintains an active security response, addressing issues through regular updates. While no major public incidents have been documented, the 13 CVEs on record highlight potential risks in handling untrusted input, particularly in its web interface and plugin system. Security researchers have identified vulnerabilities in components like rz-ghidra and rz-pjs, emphasizing the need for careful input sanitization when processing external files.