VDB
CVE-2021-43814
CVE-2021-43814
PUBLISHED
CVSS 7.699999809265137 HIGH
Rizin is a UNIX-like reverse engineering framework and command-line toolset. In versions up to and including 0.3.1 there is a heap-based out of bounds write in parse_die() when reversing an AMD64 ELF binary with DWARF debug info. When a malicious AMD64 ELF binary is opened by a victim user, Rizin may crash or execute unintended actions. No workaround are known and users are advised to upgrade.
EPSS 0.87% · 58.9th percentile
Risk Scores
CVSS 3.1
7.699999809265137
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
EPSS Score
0.87%
58.9th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| rizinorg | rizin | <= 0.3.1 |
| rizin | rizin | 0 |
Timeline
- Dec 13, 2021 CVE Published
- Dec 14, 2021 EPSS Score
- Jan 6, 2022 EPSS Score
- Feb 4, 2022 EPSS Score
- Apr 1, 2022 EPSS Score
- Apr 4, 2022 EPSS Score
- May 29, 2022 EPSS Score
- Jul 24, 2022 EPSS Score
- Sep 18, 2022 EPSS Score
- Nov 12, 2022 EPSS Score
- Mar 3, 2023 EPSS Score
- Mar 7, 2023 EPSS Score