rizin before Release v0.6.3 is vulnerable to Uncontrolled Resource Consumption via bin_pe_parse_imports, Pe_r_bin_pe_parse_var, and estimate_slide.
References
Link | Resource |
---|---|
https://gist.github.com/Crispy-fried-chicken/fb9f7000f0517a085483f7f2a60f0f08 | Third Party Advisory |
https://github.com/rizinorg/rizin/commit/e42999dda0be7737fafaf5e63c1c5833a72fd9c9 | Patch |
Configurations
History
02 Jul 2025, 20:36
Type | Values Removed | Values Added |
---|---|---|
References | () https://gist.github.com/Crispy-fried-chicken/fb9f7000f0517a085483f7f2a60f0f08 - Third Party Advisory | |
References | () https://github.com/rizinorg/rizin/commit/e42999dda0be7737fafaf5e63c1c5833a72fd9c9 - Patch | |
CPE | cpe:2.3:a:rizin:rizin:*:*:*:*:*:*:*:* | |
First Time |
Rizin rizin
Rizin |
03 Dec 2024, 16:15
Type | Values Removed | Values Added |
---|---|---|
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.5 |
CWE | CWE-770 |
02 Dec 2024, 15:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2024-12-02 15:15
Updated : 2025-07-02 20:36
NVD link : CVE-2024-31669
Mitre link : CVE-2024-31669
CVE.ORG link : CVE-2024-31669
JSON object : View
Products Affected
rizin
- rizin
CWE
CWE-770
Allocation of Resources Without Limits or Throttling