CVE-2021-43814

Name of the Vulnerable Software and Affected Versions Rizin versions up to and including 0.3.1

Description The issue is related to a heap-based out of bounds write in the parse die() function when reversing an AMD64 ELF binary with DWARF debug info. This can cause Rizin to crash or execute unintended actions when a malicious AMD64 ELF binary is opened.

Recommendations For versions up to and including 0.3.1, users are advised to upgrade to a newer version to resolve the issue. As a temporary workaround, consider avoiding the use of the parse die() function when reversing AMD64 ELF binaries with DWARF debug info until a patch is available.