CVE-2026-45613CWE-125

Rizin: Heap-buffer-overflow in OMF parser

Low · published May 29, 2026

CVSS v3.1
3.3
EPSS
0%
Percentile
4.4
In the wild
Unconfirmed
What it is

Rizin is a UNIX-like reverse engineering framework and command-line toolset. There is a heap-buffer-overflow in librz/bin/format/omf/omf.c. This vulnerability is fixed by commit e6d0937c8a083e23ed76ccfb9f631cdc50c7af47.

The record
Technical detail
CVSS v3.1
3.3 · LOW
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00156 · 4.4th percentile
Weakness
CWE-125 · Out-of-bounds Read
Published
2026-05-29T19:07Z
EPSS history
Timeline
  • 29 MAY 19:07Z
    Rizin: Heap-buffer-overflow in OMF parser
    cvelistv5