CVE-2026-45324— Rizin: Double free in cmd_search.c
Possible ATT&CK Techniques 1AI
T1203 · Exploitation for Client ExecutionGet alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-45324
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Rizin: Double free in cmd_search.c
Source: NVD (National Vulnerability Database)
Vulnerability Description
Rizin is a UNIX-like reverse engineering framework and command-line toolset. There is a double free in librz/core/cmd/cmd_search.c:byte_pattern_search() due wrong pointer ownership declared. This vulnerability is fixed by commit 045fff363b42b8a6dda8ad5229c29ec3267e7dbe.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:P/AC:H/PR:L/UI:R/S:C/C:N/I:L/A:L
Source: NVD (National Vulnerability Database)
Vulnerability Type
双重释放
Source: NVD (National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2026-45324
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-45324
请登录查看更多情报信息。
Patches & Fixes for CVE-2026-45324 (1)
Vendor Advisories for CVE-2026-45324 (1)
- 🔗 Double free in cmd_search.c · Advisory · rizinorg/rizin · GitHub Read full article x_refsource_CONFIRM
IV. Related Vulnerabilities
Same product: rizin
- CVE-2026-45613
Rizin: Heap-buffer-overflow in OMF parser - CVE-2026-22780
Rizin has a heap overflow on mach0_chained_fixups.c - CVE-2025-1788
rizinorg rizin utf8.c rz_utf8_encode heap-based overflow - CVE-2025-1786
rizinorg rizin pdb.c msf_stream_directory_free buffer overfl - CVE-2024-53256
Rizin has a command injection via RzBinInfo bclass due legac
Same vendor: rizinorg
- CVE-2026-45613
Rizin: Heap-buffer-overflow in OMF parser - CVE-2026-22780
Rizin has a heap overflow on mach0_chained_fixups.c - CVE-2025-1788
rizinorg rizin utf8.c rz_utf8_encode heap-based overflow - CVE-2025-1786
rizinorg rizin pdb.c msf_stream_directory_free buffer overfl - CVE-2024-53256
Rizin has a command injection via RzBinInfo bclass due legac
Same weakness: CWE-415
- CVE-2026-48850
PuTTY 资源管理错误漏洞 - CVE-2026-32848
NetBSD cryptodev Race Condition Double-Free via cryptodev_op - CVE-2020-37239
libbabl 0.1.62 Broken Double Free Detection Memory Safety - CVE-2026-44348
PoDoFo: Double-free vulnerability in compute_hash_to_sign() - CVE-2026-34341
Windows Link-Layer Discovery Protocol (LLDP) Elevation of Pr
V. Comments for CVE-2026-45324
No comments yet