CVE-2026-45613

LowCVSS 3.3

Published: 29/05/2026(UTC)Updated: 22/07/2026(UTC)Translated: 23/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.11%

2th percentile - higher than 2% of all known CVEs

Summary

In Rizin, a heap-buffer-overflow exists in librz/bin/format/omf/omf.c. Fixed by commit e6d0937c8a083e23ed76ccfb9f631cdc50c7af47.

Risk Assessment

Exploitation may cause memory corruption, potentially leading to arbitrary code execution or crash.

Recommendation

Update Rizin to a version including commit e6d0937c8a083e23ed76ccfb9f631cdc50c7af47.

Original NVD description (English source)

Rizin is a UNIX-like reverse engineering framework and command-line toolset. There is a heap-buffer-overflow in librz/bin/format/omf/omf.c. This vulnerability is fixed by commit e6d0937c8a083e23ed76ccfb9f631cdc50c7af47.