Vulnerability · Published Jul 27, 2022 · Assigned by mitre

CVE-2022-34612

Medium 5.5

In plain English

A medium-severity security flaw in the affected software. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 32% of all known vulnerabilities).

Severity (CVSS NVD)5.5Medium

Exploit odds (30 days)0.4%top 68.4% of all CVEs

Exploited in the wildNo reportsnot in CISA KEV

Attack toolingNoneno public tooling known

Official description

Rizin v0.4.0 and below was discovered to contain an integer overflow via the function get_long_object(). This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted binary.

Affected products (as reported)

Vendor	Product	Versions
n/a	n/a	n/a

References

https://github.com/rizinorg/rizin/issues/2738
https://github.com/rizinorg/rizin/pull/2739
GLSA-202209-06 vendor-advisory
FEDORA-2023-af305bed3d vendor-advisory