CVE-2026-45612CWE-125

CVE-2026-45612

Medium · published July 16, 2026

CVSS v3.1
5.5
EPSS
0%
Percentile
6.5
In the wild
Unconfirmed
What it is

rz-libdemangle is a Rizin library for demangling symbols. Prior to 6bf56d3, the Rust demangler in src/rust/rust_v0.c can perform an out-of-bounds read when the demangler structure is not yet initialized. This issue is fixed in commit 6bf56d3.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00174 · 6.5th percentile
Weakness
CWE-125 · Out-of-bounds Read
Published
2026-07-16T21:16Z
References (3)
https://github.com/rizinorg/rz-libdemangle/commit/6bf56d32b32547ae4cb069ccfc2d2b6c7b63a4cb · [email protected]https://github.com/rizinorg/rz-libdemangle/pull/83 · [email protected]https://github.com/rizinorg/rz-libdemangle/security/advisories/GHSA-4p92-mfjf-qvrc · [email protected]
EPSS history
Timeline
  • 16 JUL 16:34Z
    rz-libdemangle: Out of bound read in rust demangler
    cvelistv5