CVE-2026-31053 Details
Description
A double free vulnerability exists in librz/bin/format/le/le.c in the function le_load_fixup_record(). When processing malformed or circular LE fixup chains, relocation entries may be freed multiple times during error handling. A specially crafted LE binary can trigger heap corruption and cause the application to crash, resulting in a denial-of-service condition. An attacker with a crafted binary could cause a denial of service when the tool is integrated on a service pipeline.
A double free vulnerability has been identified in the Rizin binary analysis tool, specifically within the LE format handling code. This vulnerability arises in the function 'le_load_fixup_record()' located in 'librz/bin/format/le/le.c'. When the application processes malformed or circular LE fixup chains, it can inadvertently free relocation entries multiple times during error recovery. This mismanagement of memory can lead to heap corruption, causing the application to crash and create a denial-of-service condition. An attacker could exploit this vulnerability by using a crafted LE binary, particularly when Rizin is integrated into a service pipeline.
Users can update to the latest version of Rizin, where this vulnerability has been addressed.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Apr 6, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/rizinorg/rizin/issues/5753 | [email protected] | ExploitIssue TrackingThird Party Advisory |
| https://github.com/rizinorg/rizin/pull/5795 | [email protected] | Issue TrackingPatch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-415 | Double Free | CISA-ADP |
Affected Products
| Product | Versions |
|---|---|
| rizin rizin | 0.8.1 |
CPE
Remediation
| |
Change History
5 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Apr 14, 2026 | Initial Analysis | [email protected] |
| Apr 6, 2026 | CVE Modified | CISA-ADP |
| Apr 6, 2026 | New CVE Received | [email protected] |