Rizin
6 CVEs tracked since 2022. Since Sep 2022, none of them reached CISA KEV.
Rizin CVEs per month
| Month | CVEs | In CISA KEV |
|---|---|---|
| 2022-09 | 6 | 0 |
| 2022-10 | 2 or fewer | |
| 2022-11 | 3 or fewer | |
| 2022-12 | 3 or fewer | |
| 2023-01 | 3 or fewer | |
| 2023-02 | 3 or fewer | |
| 2023-03 | no snapshot | |
| 2023-04 | 3 or fewer | |
| 2023-05 | 3 or fewer | |
| 2023-06 | 4 or fewer | |
| 2023-07 | 3 or fewer | |
| 2023-08 | 4 or fewer | |
| 2023-09 | 3 or fewer | |
| 2023-10 | 4 or fewer | |
| 2023-11 | 4 or fewer | |
| 2023-12 | 4 or fewer | |
| 2024-01 | 4 or fewer | |
| 2024-02 | 4 or fewer | |
| 2024-03 | 4 or fewer | |
| 2024-04 | 4 or fewer | |
| 2024-05 | 5 or fewer | |
| 2024-06 | 4 or fewer | |
| 2024-07 | 4 or fewer | |
| 2024-08 | 4 or fewer | |
| 2024-09 | 3 or fewer | |
| 2024-10 | 4 or fewer | |
| 2024-11 | 4 or fewer | |
| 2024-12 | 3 or fewer | |
| 2025-01 | 4 or fewer | |
| 2025-02 | 3 or fewer | |
| 2025-03 | 5 or fewer | |
| 2025-04 | 4 or fewer | |
| 2025-05 | 4 or fewer | |
| 2025-06 | 4 or fewer | |
| 2025-07 | 5 or fewer | |
| 2025-08 | 4 or fewer | |
| 2025-09 | 4 or fewer | |
| 2025-10 | 4 or fewer | |
| 2025-11 | 4 or fewer | |
| 2025-12 | 5 or fewer | |
| 2026-01 | 5 or fewer | |
| 2026-02 | 5 or fewer | |
| 2026-03 | 7 or fewer | |
| 2026-04 | 6 or fewer | |
| 2026-05 | 7 or fewer | |
| 2026-06 | 7 or fewer | |
| 2026-07 | 7 or fewer | |
| 2026-08 | 8 or fewer | |
| 2026-09 | 9 or fewer | |
| 2026-10 | 6 or fewer |
Products
The products that kept showing up in Rizin's monthly top three, with their CVEs summed over those months.
Latest CVEs
The 15 most recently published vulnerabilities affecting Rizin.
- CVE-2026-31053A double free vulnerability exists in librz/bin/format/le/le.c in the function le_load_fixup_record(). When processing malformed or circular LE fixup chains, relocation entries may be freed multipl...6.2
- CVE-2026-22780Rizin has a heap overflow on mach0_chained_fixups.c4.4
- CVE-2025-1788rizinorg rizin utf8.c rz_utf8_encode heap-based overflow5.3
- CVE-2025-1786rizinorg rizin pdb.c msf_stream_directory_free buffer overflow5.3
- CVE-2024-31668rizin before v0.6.3 is vulnerable to Improper Neutralization of Special Elements via meta_set function in librz/analysis/meta.9.1
- CVE-2024-31670rizin before v0.6.3 is vulnerable to Buffer Overflow via create_cache_bins, read_cache_accel, and rz_dyldcache_new_buf functions in librz/bin/format/mach0/dyldcache.c.6.3
- CVE-2024-31669rizin before Release v0.6.3 is vulnerable to Uncontrolled Resource Consumption via bin_pe_parse_imports, Pe_r_bin_pe_parse_var, and estimate_slide.7.5
- CVE-2023-40022Rizin vulnerable to Integer Overflow in C++ demangler logic7.8
- CVE-2023-30226An issue was discovered in function get_gnu_verneed in rizinorg Rizin prior to 0.5.0 verneed_entry allows attackers to cause a denial of service via crafted elf file.5.5
- CVE-2021-3674A flaw was found in rizin. The create_section_from_phdr function allocates space for ELF section data by processing the headers. Crafted values in the headers can cause out of bounds reads, which c...7.8
- CVE-2023-27590Rizin has stack-based buffer overflow when parsing GDB registers profile files7.8
- CVE-2022-36039Out-of-bounds write when parsing DEX files in Rizin7.8
- CVE-2022-36044Rizin Out-of-bounds Write vulnerability in Lua binary plugin7.8
- CVE-2022-36043Rizin Double Free in bobj.c when using qnx binary plugin7.8
- CVE-2022-36042Rizin Out-of-bounds Write vulnerability in dyld cache binary plugin7.8
The record
- Peak rank
- #98 in Sep 2022
- Busiest month shown
- Sep 2022, 6 CVEs
- Months with a KEV entry
- 0 since Sep 2022
- Monthly snapshots
- 1 since 2022