CVE-2025-1788

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

A vulnerability, which was classified as critical, was found in rizinorg rizin up to 0.8.0. This affects the function rz_utf8_encode in the library /librz/util/utf8.c. The manipulation leads to heap-based buffer overflow. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-119 CWE-122

Affected software

Vendor	Product	Versions
rizinorg	rizin	0.1; 0.2; 0.3; 0.4; 0.5; 0.6; 0.7; 0.8

References

https://github.com/rizinorg/rizin/issues/4910Exploit, Issue Tracking
https://github.com/rizinorg/rizin/issues/4910#issuecomment-2662963253Issue Tracking
https://github.com/rizinorg/rizin/pull/4762Issue Tracking
https://github.com/user-attachments/files/18817099/rz-bin-poc-01.zipExploit
https://vuldb.com/?ctiid.298011Permissions Required, VDB Entry
https://vuldb.com/?id.298011Third Party Advisory, VDB Entry
https://vuldb.com/?submit.502345Exploit, Third Party Advisory, VDB Entry
https://github.com/rizinorg/rizin/issues/4910#issuecomment-2662963253Issue Tracking

Timeline

Published: Mar 1, 2025
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-17897.8Local privilege escalation in Genetec Update Service. An authenticated, low-privileged, Windows user could exploit this vulnerability to gai CVE-2025-17905.8Local privilege escalation in Genetec Sipelia Plugin. An authenticated low-privileged Windows user could exploit this vulnerability to gain CVE-2025-17919.8A vulnerability has been found in Zorlan SkyCaiji 2.9 and classified as critical. This vulnerability affects the function fileAction of the CVE-2025-17923.1Mattermost versions 10.7.x <= 10.7.0, 10.5.x <= 10.5.3, 9.11.x <= 9.11.12 fail to properly enforce access controls for guest users accessing CVE-2025-17939.8Multiple vector store integrations in run-llama/llama_index version v0.12.21 have SQL injection vulnerabilities. These vulnerabilities allow CVE-2025-17945.4The AM LottiePlayer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via uploaded SVG files in all versions up to, and incl CVE-2025-17952.3During an address list folding when a separating comma ends up on a folded line and that line is to be unicode-encoded then the separator it CVE-2025-17968.8A vulnerability in langgenius/dify v0.10.1 allows an attacker to take over any account, including administrator accounts, by exploiting a we CVE-2025-17976.3A vulnerability, which was classified as critical, has been found in Hunan Zhonghe Baiyi Information Technology Baiyiyun Asset Management an CVE-2025-17986.1The does not sanitise and escape some parameters when outputting them back in a page, allowing unauthenticated users the ability to perform CVE-2025-17996.3A vulnerability, which was classified as critical, was found in Zorlan SkyCaiji 2.9. This affects the function previewAction of the file ven CVE-2025-18008.8A vulnerability has been found in D-Link DAR-7000 3.2 and classified as critical. This vulnerability affects the function get_ip_addr_detail