CVE-2025-1786

Name of the Vulnerable Software and Affected Versions rizinorg rizin versions 0.7.4 and earlier

Description A critical issue affects the function msf stream directory free in the library /librz/bin/pdb/pdb.c. The manipulation of the argument -P leads to buffer overflow. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used.

Recommendations To address this issue, upgrade to version 0.8.0. As a temporary workaround, consider restricting access to the msf stream directory free function until a patch is available. Avoid using the argument -P in the affected library until the issue is resolved.