CVE-2026-45613 PUBLISHED

Rizin: Heap-buffer-overflow in OMF parser

Assigner: GitHub_M
Reserved: 12.05.2026 Published: 29.05.2026 Updated: 29.05.2026

Rizin is a UNIX-like reverse engineering framework and command-line toolset. There is a heap-buffer-overflow in librz/bin/format/omf/omf.c. This vulnerability is fixed by commit e6d0937c8a083e23ed76ccfb9f631cdc50c7af47.

Metrics

CVSS 3.1

CVSS Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
CVSS Score: 3.3

Attack Vector	Local	Scope	Unchanged
Attack Complexity	Low	Confidentiality Impact	Low
Privileges Required	None	Integrity Impact	None
User Interaction	Required	Availability Impact	None

CVSS 3.1

Product Status

Vendor	rizinorg
Product	rizin
Versions	Version < e6d0937c8a083e23ed76ccfb9f631cdc50c7af47 is affected

References

https://github.com/rizinorg/rizin/security/advisories/GHSA-wprr-wrcw-mw6v
https://github.com/rizinorg/rizin/commit/e6d0937c8a083e23ed76ccfb9f631cdc50c7af47

Problem Types

CWE-125: Out-of-bounds Read CWE