CVE-2026-45612: Rizinorg Rz-Libdemangle

Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days.

rz-libdemangle is a Rizin library for demangling symbols. Prior to 6bf56d3, the Rust demangler in src/rust/rust_v0.c can perform an out-of-bounds read when the demangler structure is not yet initialized. This issue is fixed in commit 6bf56d3.

Affected products

• Rizinorg Rz-Libdemangle: before 6bf56d32b32547ae4cb069ccfc2d2b6c7b63a4cb (fixed in 6bf56d32b32547ae4cb069ccfc2d2b6c7b63a4cb)

Published 2026-07-16. Last modified 2026-07-16.