CVE-2026-45324: Rizinorg Rizin

Low severity, CVSS 3.3. EPSS: 0.1% chance of exploitation in the next 30 days.

Rizin is a UNIX-like reverse engineering framework and command-line toolset. There is a double free in librz/core/cmd/cmd_search.c:byte_pattern_search() due wrong pointer ownership declared. This vulnerability is fixed by commit 045fff363b42b8a6dda8ad5229c29ec3267e7dbe.

Affected products

• Rizinorg Rizin: before 045fff363b42b8a6dda8ad5229c29ec3267e7dbe (fixed in 045fff363b42b8a6dda8ad5229c29ec3267e7dbe)

Published 2026-05-29. Last modified 2026-07-22.