Low severity3.3NVD Advisory· Published May 29, 2026· Updated May 29, 2026

CVE-2026-45324

Description

Rizin is a UNIX-like reverse engineering framework and command-line toolset. There is a double free in librz/core/cmd/cmd_search.c:byte_pattern_search() due wrong pointer ownership declared. This vulnerability is fixed by commit 045fff363b42b8a6dda8ad5229c29ec3267e7dbe.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Rizin/Rizinreferences2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)

Patches

Vulnerability mechanics

References

github.com/rizinorg/rizin/commit/045fff363b42b8a6dda8ad5229c29ec3267e7dbenvd
github.com/rizinorg/rizin/security/advisories/GHSA-2377-chx7-xf7cnvd

News mentions

No linked articles in our index yet.

cvss	0.214
epss	0.000
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000