Rizin Heap-Based Buffer Overflow Vulnerability in UTF-8 Encoding Function

A critical heap-based buffer overflow vulnerability has been identified in Rizin versions prior to 0.8.0. The issue arises in the function 'rz_utf8_encode' within the file '/librz/util/utf8.c'. This vulnerability requires local exploitation.

Impact

Exploitation of this vulnerability leads to a heap-based buffer overflow, which can commonly result in arbitrary code execution or a crash due to memory corruption.

Reproduction

The vulnerability can be reproduced by using the Rizin command-line tool 'rz-bin' with the '-z' option, which is used for string searching. The command should include a specially crafted string that exploits the buffer overflow vulnerability in the 'rz_utf8_encode' function. This can be done by referencing the proof-of-concept file 'poc' included in the 'rz-bin-poc-01.zip' archive.

Remediation

Users are advised to update to Rizin version 0.8.0 or later, where this vulnerability has been fixed.