CVE-2026-45324

LowCVSS 3.3

Published: 29/05/2026(UTC)Updated: 22/07/2026(UTC)Translated: 23/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.10%

1th percentile - higher than 1% of all known CVEs

Summary

In Rizin, a double free vulnerability exists in byte_pattern_search() due to incorrect pointer ownership.

Risk Assessment

Double free can lead to memory corruption, program crashes, or potential code execution by an attacker.

Recommendation

Update Rizin to a version containing commit 045fff363b42b8a6dda8ad5229c29ec3267e7dbe.

Original NVD description (English source)

Rizin is a UNIX-like reverse engineering framework and command-line toolset. There is a double free in librz/core/cmd/cmd_search.c:byte_pattern_search() due wrong pointer ownership declared. This vulnerability is fixed by commit 045fff363b42b8a6dda8ad5229c29ec3267e7dbe.