Rizin Double Free Vulnerability in Byte Pattern Search Function

A double free vulnerability has been identified in the Rizin reverse engineering framework, specifically within the byte_pattern_search function of the command search module. This issue arises from incorrect pointer ownership declarations, leading to improper memory management.

Impact

Exploitation of this vulnerability causes a heap-based use-after-free condition, which can potentially be leveraged for arbitrary code execution.

Reproduction

The vulnerability can be reproduced by calling the byte_pattern_search function with invalid boundary values. This can be done by setting the 'search.in' configuration option to a mode that does not correspond with the 'search.from' and 'search.to' values, such as 'section'.

Remediation

Users should update to version 045fff3, where this vulnerability has been patched. Additionally, avoid using invalid boundary values in search operations.