Heap Overflow Vulnerability in Rizin Command-Line Toolset

CVE-2026-22780

What is CVE-2026-22780?

Rizin, a UNIX-like reverse engineering framework, is vulnerable to a heap overflow when processing malicious mach0 files with incorrect dyld chained segment entries. This exploit can potentially allow unauthorized access or manipulation of the tool's memory. The issue has been resolved in Rizin version 0.8.2, following a series of security advisories and community discussions. The vulnerability emphasizes the importance of keeping reverse engineering tools up to date to mitigate the risks associated with malicious file parsing.

References