Threat database

CVE-2026-22780 is a medium severity heap overflow vulnerability in rizin versions prior to 0.8.2. It occurs when rizin parses a malicious Mach-O file containing bogus entries in the dyld chained segments, leading to allocation of resources without proper limits or throttling. Exploitation requires local access and user interaction, with no privileges needed, and can result in partial integrity and availability impacts. The vulnerability has not been observed exploited in the wild and was fixed in version 0.8.2. European organizations using rizin for reverse engineering or malware analysis should update promptly to mitigate risks. The threat primarily affects UNIX-like environments where rizin is deployed, with higher relevance in countries with strong cybersecurity research and software development sectors.

rizin before v0.6.3 is vulnerable to Improper Neutralization of Special Elements via meta_set function in librz/analysis/meta.

rizin before v0.6.3 is vulnerable to Buffer Overflow via create_cache_bins, read_cache_accel, and rz_dyldcache_new_buf functions in librz/bin/format/mach0/dyldcache.c.

rizin before Release v0.6.3 is vulnerable to Uncontrolled Resource Consumption via bin_pe_parse_imports, Pe_r_bin_pe_parse_var, and estimate_slide.