CVE-2023-40022

    Dashboard / Vulnerabilities / CVE-2023-40022

    CVE-2023-40022

    Published: 24 Aug 2023Last Modified: 12 Aug 2026

    Summary: Rizin vulnerable to Integer Overflow in C++ demangler logic

    Details: Rizin is a UNIX-like reverse engineering framework and command-line toolset. Versions 0.6.0 and prior are vulnerable to integer overflow in `consume_count` of `src/gnu_v2/cplus-dem.c`. The overflow check is valid logic but, is missing the modulus if the block once compiled. The compiler sees this block as unreachable code since the prior statement is multiplication by 10 and fails to consider overflow assuming the count will always be a multiple of 10. Rizin version 0.6.1 contains a fix for the issue. A temporary workaround would be disabling C++ demangling using the configuration option `bin.demangle=false`.

    References: https://github.com/rizinorg/rz-libdemangle/blob/main/src/gnu_v2/cplus-dem.c#L419, https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/40xxx/CVE-2023-40022.json, https://github.com/rizinorg/rizin/security/advisories/GHSA-92h6-wwc2-53cq, https://nvd.nist.gov/vuln/detail/CVE-2023-40022, https://github.com/rizinorg/rizin/pull/3753, https://github.com/rizinorg/rz-libdemangle/commit/51d016750e704b27ab8ace23c0f72acabca67018, https://github.com/rizinorg/rz-libdemangle/pull/54

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 0
    Fixed -d9af48b56e47afadd1a77e74c12099efd5e8e19e

    Affected versions

    v0.6.0

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2023-40022 | CVE-DB