Vulnerability · Published Jul 16, 2026 · Assigned by GitHub_M
CVE-2026-45612rz-libdemangle: Out of bound read in rust demangler
Medium 5.5
In plain English
A medium-severity out-of-bounds read in rz-libdemangle from rizinorg. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 7% of all known vulnerabilities).
Severity (CVSS 3.1)5.5Medium
Exploit odds (30 days)0.2%top 93.1% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
rz-libdemangle is a Rizin library for demangling symbols. Prior to 6bf56d3, the Rust demangler in src/rust/rust_v0.c can perform an out-of-bounds read when the demangler structure is not yet initialized. This issue is fixed in commit 6bf56d3.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| rizinorg | rz-libdemangle | < 6bf56d32b32547ae4cb069ccfc2d2b6c7b63a4cb |
Weakness: CWE-125 · Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N