rizin records

20 published records for vendor rizin.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 1
With a fix record: 10%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

20 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
36Monitor	CVE-2024-31668No exploit	rizin before v0.6.3 is vulnerable to Improper Neutralization of Special Elements via meta_set function in librz/analysis/meta.rizin · rizin · CWE-78 pre-auth RCE Command injection	Critical9.1	—	0.5%	Dec 17, 2024
31Monitor	CVE-2021-43814No exploit	Heap-based OOB write when parsing dwarf DIE info in Rizinrizin · rizin · CWE-787 Memory safety	High7.8	—	0.8%	Dec 13, 2021
31Monitor	CVE-2021-3674No exploit	A flaw was found in rizin.rizin · rizin · CWE-119 Memory safety	High7.8	—	0.4%	Mar 24, 2023
31Monitor	CVE-2022-36039No exploit	Out-of-bounds write when parsing DEX files in Rizinrizin · rizin · CWE-787 Memory safety	High7.8	—	0.3%	Sep 6, 2022
31Monitor	CVE-2022-36043No exploit	Rizin Double Free in bobj.c when using qnx binary pluginrizin · rizin · CWE-415 Memory safety	High7.8	—	0.3%	Sep 6, 2022
31Monitor	CVE-2022-36040No exploit	Rizin Out-of-bounds Write vulnerability in pyc/marshal.crizin · rizin · CWE-787 Memory safety	High7.8	—	0.3%	Sep 6, 2022
31Monitor	CVE-2022-36041No exploit	Rizin Out-of-bounds Write vulnerability in Mach-O binary pluginrizin · rizin · CWE-787 Memory safety	High7.8	—	0.3%	Sep 6, 2022
31Monitor	CVE-2022-36044No exploit	Rizin Out-of-bounds Write vulnerability in Lua binary pluginrizin · rizin · CWE-787 Memory safety	High7.8	—	0.3%	Sep 6, 2022
31Monitor	CVE-2022-36042No exploit	Rizin Out-of-bounds Write vulnerability in dyld cache binary pluginrizin · rizin · CWE-787 Memory safety	High7.8	—	0.3%	Sep 6, 2022
31Monitor	CVE-2023-27590No exploit	Rizin has stack-based buffer overflow when parsing GDB registers profile filesrizin · rizin · CWE-120 Memory safety	High7.8	—	0.3%	Mar 14, 2023
31Monitor	CVE-2023-40022No exploit	Rizin vulnerable to Integer Overflow in C++ demangler logicrizin · rizin · CWE-190 Memory safety	High7.8	—	0.2%	Aug 24, 2023
30Monitor	CVE-2024-31669No exploit	rizin before Release v0.6.3 is vulnerable to Uncontrolled Resource Consumption via bin_pe_parse_imports, Pe_r_bin_pe_parse_var, and estimaterizin · rizin · CWE-770 Pre-auth Denial of service	High7.5	—	0.4%	Dec 2, 2024
25Monitor	CVE-2024-31670No exploit	rizin before v0.6.3 is vulnerable to Buffer Overflow via create_cache_bins, read_cache_accel, and rz_dyldcache_new_buf functions in librz/birizin · rizin · CWE-120 Memory safety	Medium6.3	—	0.2%	Dec 12, 2024
24Monitor	CVE-2026-22780No exploit	Rizin has a heap overflow on mach0_chained_fixups.crizin · rizin · CWE-770 Denial of service	Medium6.1	—	0.2%	Feb 2, 2026
24Monitor	CVE-2026-31053No exploit	A double free vulnerability exists in librz/bin/format/le/le.c in the function le_load_fixup_record().rizin · rizin · CWE-415 Memory safety Denial of service	Medium6.2	—	0.1%	Apr 6, 2026
22Monitor	CVE-2022-34612No exploit	Rizin v0.4.0 and below was discovered to contain an integer overflow via the function get_long_object().rizin · rizin · CWE-190 Memory safety Denial of service	Medium5.5	—	0.3%	Jul 26, 2022
22Monitor	CVE-2023-30226Proof of concept	An issue was discovered in function get_gnu_verneed in rizinorg Rizin prior to 0.5.0 verneed_entry allows attackers to cause a denial of serrizin · rizin · CWE-834 Denial of service	Medium5.5	—	0.3%	Jul 11, 2023
22Monitor	CVE-2021-4022No exploit	A vulnerability was found in rizin.rizin · rizin · CWE-400 Denial of service	Medium5.5	—	0.3%	Aug 25, 2022
19Monitor	CVE-2025-1786No exploit	rizinorg rizin pdb.c msf_stream_directory_free buffer overflowrizin · rizin · CWE-119 Memory safety	Medium4.8	—	0.3%	Mar 1, 2025
19Monitor	CVE-2025-1788No exploit	rizinorg rizin utf8.c rz_utf8_encode heap-based overflowrizin · rizin · CWE-119 Memory safety	Medium4.8	—	0.3%	Mar 1, 2025

CVE-2024-31668
36Monitor
rizin before v0.6.3 is vulnerable to Improper Neutralization of Special Elements via meta_set function in librz/analysis/meta.
CriticalCVSS 9.1No exploitEPSS 0%
- pre-auth RCE
- Command injection
rizin · rizinDec 17, 2024
CVE-2021-43814
31Monitor
Heap-based OOB write when parsing dwarf DIE info in Rizin
HighCVSS 7.8No exploitEPSS 0%
- Memory safety
rizin · rizinDec 13, 2021
CVE-2021-3674
31Monitor
A flaw was found in rizin.
HighCVSS 7.8No exploitEPSS 0%
- Memory safety
rizin · rizinMar 24, 2023
CVE-2022-36039
31Monitor
Out-of-bounds write when parsing DEX files in Rizin
HighCVSS 7.8No exploitEPSS 0%
- Memory safety
rizin · rizinSep 6, 2022
CVE-2022-36043
31Monitor
Rizin Double Free in bobj.c when using qnx binary plugin
HighCVSS 7.8No exploitEPSS 0%
- Memory safety
rizin · rizinSep 6, 2022
CVE-2022-36040
31Monitor
Rizin Out-of-bounds Write vulnerability in pyc/marshal.c
HighCVSS 7.8No exploitEPSS 0%
- Memory safety
rizin · rizinSep 6, 2022
CVE-2022-36041
31Monitor
Rizin Out-of-bounds Write vulnerability in Mach-O binary plugin
HighCVSS 7.8No exploitEPSS 0%
- Memory safety
rizin · rizinSep 6, 2022
CVE-2022-36044
31Monitor
Rizin Out-of-bounds Write vulnerability in Lua binary plugin
HighCVSS 7.8No exploitEPSS 0%
- Memory safety
rizin · rizinSep 6, 2022
CVE-2022-36042
31Monitor
Rizin Out-of-bounds Write vulnerability in dyld cache binary plugin
HighCVSS 7.8No exploitEPSS 0%
- Memory safety
rizin · rizinSep 6, 2022
CVE-2023-27590
31Monitor
Rizin has stack-based buffer overflow when parsing GDB registers profile files
HighCVSS 7.8No exploitEPSS 0%
- Memory safety
rizin · rizinMar 14, 2023
CVE-2023-40022
31Monitor
Rizin vulnerable to Integer Overflow in C++ demangler logic
HighCVSS 7.8No exploitEPSS 0%
- Memory safety
rizin · rizinAug 24, 2023
CVE-2024-31669
30Monitor
rizin before Release v0.6.3 is vulnerable to Uncontrolled Resource Consumption via bin_pe_parse_imports, Pe_r_bin_pe_parse_var, and estimate
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
rizin · rizinDec 2, 2024
CVE-2024-31670
25Monitor
rizin before v0.6.3 is vulnerable to Buffer Overflow via create_cache_bins, read_cache_accel, and rz_dyldcache_new_buf functions in librz/bi
MediumCVSS 6.3No exploitEPSS 0%
- Memory safety
rizin · rizinDec 12, 2024
CVE-2026-22780
24Monitor
Rizin has a heap overflow on mach0_chained_fixups.c
MediumCVSS 6.1No exploitEPSS 0%
- Denial of service
rizin · rizinFeb 2, 2026
CVE-2026-31053
24Monitor
A double free vulnerability exists in librz/bin/format/le/le.c in the function le_load_fixup_record().
MediumCVSS 6.2No exploitEPSS 0%
- Memory safety
- Denial of service
rizin · rizinApr 6, 2026
CVE-2022-34612
22Monitor
Rizin v0.4.0 and below was discovered to contain an integer overflow via the function get_long_object().
MediumCVSS 5.5No exploitEPSS 0%
- Memory safety
- Denial of service
rizin · rizinJul 26, 2022
CVE-2023-30226
22Monitor
An issue was discovered in function get_gnu_verneed in rizinorg Rizin prior to 0.5.0 verneed_entry allows attackers to cause a denial of ser
MediumCVSS 5.5Proof of conceptEPSS 0%
- Denial of service
rizin · rizinJul 11, 2023
CVE-2021-4022
22Monitor
A vulnerability was found in rizin.
MediumCVSS 5.5No exploitEPSS 0%
- Denial of service
rizin · rizinAug 25, 2022
CVE-2025-1786
19Monitor
rizinorg rizin pdb.c msf_stream_directory_free buffer overflow
MediumCVSS 4.8No exploitEPSS 0%
- Memory safety
rizin · rizinMar 1, 2025
CVE-2025-1788
19Monitor
rizinorg rizin utf8.c rz_utf8_encode heap-based overflow
MediumCVSS 4.8No exploitEPSS 0%
- Memory safety
rizin · rizinMar 1, 2025