CVE-2026-45324

Published: May 29, 2026Modified: Jul 22, 2026Deferred

3.3

Vector

CVSS:3.1/AV:P/AC:H/PR:L/UI:R/S:C/C:N/I:L/A:L

Exploitability: 0.3 / Impact: 2.7

Source: security-advisories@github.com (Secondary)

Description

Rizin is a UNIX-like reverse engineering framework and command-line toolset. There is a double free in librz/core/cmd/cmd_search.c:byte_pattern_search() due wrong pointer ownership declared. This vulnerability is fixed by commit 045fff363b42b8a6dda8ad5229c29ec3267e7dbe.

Related CWEs

CWE-415

Double Free

The product calls free() twice on the same memory address, potentially leading to modification of unexpected memory locations.

References (2)

https://github.com/rizinorg/rizin/commit/045fff363b42b8a6dda8ad5229c29ec3267e7dbe

Source: security-advisories@github.com

https://github.com/rizinorg/rizin/security/advisories/GHSA-2377-chx7-xf7c

Source: security-advisories@github.com

Timeline

No history available yet.