Ifygecko

**Name of the Vulnerable Software and Affected Versions** Rizin versions prior to 0.7.4 **Description** Rizin is a UNIX-like reverse engineering framework and command-line toolset. A code snippet in `rizin.c` suffered a command injection due to the usage of `rz core cmdf` to invoke the command `m` which was removed in v0.1.x. A malicious binary defining `bclass` (part of RzBinInfo) is executed if `rclass` (part of RzBinInfo) is set to `fs`; the issue can be exploited by any bin format where `bclass` and `rclass` are user defined. **Recommendations** For versions prior to 0.7.4, update to version 0.7.4 to resolve the issue. As a temporary workaround, consider restricting the use of user-defined `bclass` and `rclass` in bin formats to minimize the risk of exploitation. Avoid using the `rz core cmdf` function to invoke commands until the issue is resolved.

**Name of the Vulnerable Software and Affected Versions** libdwarf (affected versions not specified) **Description** A double-free vulnerability was found in libdwarf. In a multiply-corrupted DWARF object, libdwarf may try to dealloc(free) an allocation twice, potentially causing unpredictable and various results. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Rizin versions 0.6.0 and prior **Description** The issue is related to an integer overflow in the `consume count` function of `src/gnu v2/cplus-dem.c`. This overflow occurs because the compiler considers a block of code as unreachable due to a prior multiplication statement, assuming the count will always be a multiple of 10. As a result, the overflow check, although valid, is missing the modulus if the block is compiled. **Recommendations** For versions 0.6.0 and prior, update to version 0.6.1 to resolve the issue. As a temporary workaround, consider disabling C++ demangling using the configuration option `bin.demangle=false`.

**Name of the Vulnerable Software and Affected Versions** Rizin versions prior to 0.5.0 **Description** An issue was discovered in the `get gnu verneed` function in Rizin, allowing attackers to cause a denial of service via a crafted elf file. **Recommendations** For versions prior to 0.5.0, update to version 0.5.0 or later to resolve the issue.