Поиск уязвимостей
Количество 4
Количество 4
CVE-2026-31053
A double free vulnerability exists in librz/bin/format/le/le.c in the function le_load_fixup_record(). When processing malformed or circular LE fixup chains, relocation entries may be freed multiple times during error handling. A specially crafted LE binary can trigger heap corruption and cause the application to crash, resulting in a denial-of-service condition. An attacker with a crafted binary could cause a denial of service when the tool is integrated on a service pipeline.
CVE-2026-31053
A double free vulnerability exists in librz/bin/format/le/le.c in the ...
GHSA-h848-fw25-hp2w
A double free vulnerability exists in librz/bin/format/le/le.c in the function le_load_fixup_record(). When processing malformed or circular LE fixup chains, relocation entries may be freed multiple times during error handling. A specially crafted LE binary can trigger heap corruption and cause the application to crash, resulting in a denial-of-service condition. An attacker with a crafted binary could cause a denial of service when the tool is integrated on a service pipeline.
ALT-PU-2026-3387
ALT-PU-2026-3387: package `rizin` update to version 0.8.2-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-31053 A double free vulnerability exists in librz/bin/format/le/le.c in the function le_load_fixup_record(). When processing malformed or circular LE fixup chains, relocation entries may be freed multiple times during error handling. A specially crafted LE binary can trigger heap corruption and cause the application to crash, resulting in a denial-of-service condition. An attacker with a crafted binary could cause a denial of service when the tool is integrated on a service pipeline. | CVSS3: 6.2 | 0% Низкий | 7 месяцев назад |
| CVE-2026-31053 A double free vulnerability exists in librz/bin/format/le/le.c in the ... | CVSS3: 6.2 | 0% Низкий | 7 месяцев назад |
| GHSA-h848-fw25-hp2w A double free vulnerability exists in librz/bin/format/le/le.c in the function le_load_fixup_record(). When processing malformed or circular LE fixup chains, relocation entries may be freed multiple times during error handling. A specially crafted LE binary can trigger heap corruption and cause the application to crash, resulting in a denial-of-service condition. An attacker with a crafted binary could cause a denial of service when the tool is integrated on a service pipeline. | CVSS3: 6.2 | 0% Низкий | 7 месяцев назад |
| ALT-PU-2026-3387 ALT-PU-2026-3387: package `rizin` update to version 0.8.2-alt1 | CVSS3: 6.2 | 9 месяцев назад |
Уязвимостей на страницу