CVE-2022-36039

Rizin is a UNIX-like reverse engineering framework and command-line toolset. Versions 0.4.0 and prior are vulnerable to out-of-bounds write when parsing DEX files. A user opening a malicious DEX file could be affected by this vulnerability, allowing an attacker to execute code on the user's machine. A patch is available on the `dev` branch of the repository.

• CWE-787

• https://github.com/rizinorg/rizin/commit/1524f85211445e41506f98180f8f69f7bf115406Patch, Third Party Advisory
• https://github.com/rizinorg/rizin/issues/2969Third Party Advisory
• https://github.com/rizinorg/rizin/security/advisories/GHSA-pr85-hv85-45pgThird Party Advisory
• https://security.gentoo.org/glsa/202209-06Third Party Advisory
• https://github.com/rizinorg/rizin/commit/1524f85211445e41506f98180f8f69f7bf115406Patch, Third Party Advisory
• https://github.com/rizinorg/rizin/issues/2969Third Party Advisory
• https://github.com/rizinorg/rizin/security/advisories/GHSA-pr85-hv85-45pgThird Party Advisory
• https://security.gentoo.org/glsa/202209-06Third Party Advisory

Published

Sep 6, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-36033jsoup is a Java HTML parser, built for HTML editing, cleanin…6.1
• CVE-2022-36034nitrado.js is a type safe wrapper for the Nitrado API. Possi…7.5
• CVE-2022-36035Flux is a tool for keeping Kubernetes clusters in sync with …7.8
• CVE-2022-36036mdx-mermaid provides plug and play access to Mermaid in MDX.…7.8
• CVE-2022-36037kirby is a content management system (CMS) that adapts to ma…5.4
• CVE-2022-36038CircuitVerse is an open-source platform which allows users t…7.8
• CVE-2022-3604The Contact Form Entries WordPress plugin before 1.3.0 does …7.8
• CVE-2022-36040Rizin is a UNIX-like reverse engineering framework and comma…7.8
• CVE-2022-36041Rizin is a UNIX-like reverse engineering framework and comma…7.8
• CVE-2022-36042Rizin is a UNIX-like reverse engineering framework and comma…7.8
• CVE-2022-36043Rizin is a UNIX-like reverse engineering framework and comma…7.8
• CVE-2022-36044Rizin is a UNIX-like reverse engineering framework and comma…7.8