CVE-2026-45612 Details
Description
rz-libdemangle is a Rizin library for demangling symbols. Prior to 6bf56d3, the Rust demangler in src/rust/rust_v0.c can perform an out-of-bounds read when the demangler structure is not yet initialized. This issue is fixed in commit 6bf56d3.
An out-of-bounds read vulnerability has been identified in the Rizin library 'rz-libdemangle', specifically within the Rust demangler component, in versions prior to 6bf56d3. The issue arises when the demangler structure is not properly initialized, allowing for unauthorized memory access. This vulnerability requires user interaction to exploit.
Users can upgrade to version 6bf56d3 or later to address this vulnerability.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Jul 16, 2026CISA-ADP
Assessed Jul 16, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/rizinorg/rz-libdemangle/commit/6bf56d32b32547ae4cb069ccfc2d2b6c7b63a4cb | [email protected] | Source CodeVendor |
| https://github.com/rizinorg/rz-libdemangle/pull/83 | [email protected] | Issue TrackingSource CodeVendor |
| https://github.com/rizinorg/rz-libdemangle/security/advisories/GHSA-4p92-mfjf-qvrc | [email protected] | AdvisoryRemedyVendor |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-125 | Out-of-bounds Read | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| rz-libdemangle | < 6bf56d3 |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jul 16, 2026 | CVE Modified | CISA-ADP |
| Jul 16, 2026 | New CVE Received | [email protected] |