{"id":"CVE-2024-31668","aliases":["EUVD-2024-29541","GHSA-w87m-4q2m-g66w"],"status":"published","title":"rizin before v0.6.3 is vulnerable to Improper Neutralization of Special Elements via meta_set...","description":"rizin before v0.6.3 is vulnerable to Improper Neutralization of Special Elements via meta_set function in librz/analysis/meta.","severity":{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"critical","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-12","score":0.00523,"percentile":0.44885,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-78"],"published":"2024-12-17T00:00:00Z","modified":"2026-11-11T02:47:41Z","products":[{"vendor":"rizin","product":"rizin"}],"references":[{"url":"https://github.com/rizinorg/rizin/commit/c025dcee40c8eac2ab559f2caa3798a2dbf019e4","tags":["Patch","fix"]},{"url":"https://gist.github.com/Crispy-fried-chicken/cb0b3a653a43a2fe2361641eddd8330d","tags":["Third Party Advisory","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-31668","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-w87m-4q2m-g66w"},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/31xxx/CVE-2024-31668.json","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2024-31668","description":"rizin before v0.6.3 is vulnerable to Improper Neutralization of Special Elements via meta_set function in librz/analysis/meta.","status":"published","published":"2024-12-17T00:00:00Z","modified":"2024-12-18T15:49:11.878Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"critical","assessor":"adp"}],"cwes":["CWE-78"],"updated_at":"2026-11-02T14:34:14.649724Z"}],"euvd":[{"id":"EUVD-2024-29541","description":"rizin before v0.6.3 is vulnerable to Improper Neutralization of Special Elements via meta_set function in librz/analysis/meta.","status":"published","published":"2024-12-17T00:00:00Z","modified":"2024-12-18T15:49:11Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"critical"}],"updated_at":"2026-11-03T00:04:34.500778Z"}],"ghsa":[{"id":"GHSA-w87m-4q2m-g66w","title":"rizin before v0.6.3 is vulnerable to Improper Neutralization of Special Elements via meta_set...","description":"rizin before v0.6.3 is vulnerable to Improper Neutralization of Special Elements via meta_set function in librz/analysis/meta.","status":"published","published":"2024-12-18T00:31:23Z","modified":"2024-12-18T18:30:52Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"critical"}],"cwes":["CWE-78"],"updated_at":"2026-11-02T14:59:14.104556Z"}],"nvd":[{"id":"CVE-2024-31668","description":"rizin before v0.6.3 is vulnerable to Improper Neutralization of Special Elements via meta_set function in librz/analysis/meta.","status":"published","published":"2024-12-17T22:15:06.677Z","modified":"2026-06-17T07:28:40.34Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"critical","assessor":"secondary"}],"cwes":["CWE-78"],"updated_at":"2026-11-02T14:10:40.507978Z"}],"osv":[{"id":"CVE-2024-31668","description":"rizin before v0.6.3 is vulnerable to Improper Neutralization of Special Elements via meta_set function in librz/analysis/meta.","status":"published","published":"2024-12-17T00:00:00Z","modified":"2026-11-11T13:23:43.133718394Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"critical"}],"updated_at":"2026-11-11T03:22:28.447808Z"}]}}