CVE-2026-45613: Rizinorg Rizin

Low severity, CVSS 3.3. EPSS: 0.2% chance of exploitation in the next 30 days.

Rizin is a UNIX-like reverse engineering framework and command-line toolset. There is a heap-buffer-overflow in librz/bin/format/omf/omf.c. This vulnerability is fixed by commit e6d0937c8a083e23ed76ccfb9f631cdc50c7af47.

Affected products

• Rizinorg Rizin: before e6d0937c8a083e23ed76ccfb9f631cdc50c7af47 (fixed in e6d0937c8a083e23ed76ccfb9f631cdc50c7af47)

Published 2026-05-29. Last modified 2026-07-22.