Out-of-Bounds Read in rz-libdemangle Rust Demangler

Executive Summary

CVE-2026-45612 is an out-of-bounds read vulnerability in the rz-libdemangle library's Rust demangler component. It occurs when the demangler structure is not properly initialized, causing the program to read memory outside the intended buffer. The issue affects versions before commit 6bf56d3.

Useful 0 Not Useful 0

Detection Guidance

Detecting this vulnerability requires checking the version of rz-libdemangle in use. If your version is prior to commit 6bf56d3, the system is vulnerable. Use commands like 'git log --oneline' in the rz-libdemangle directory or inspect the library version to verify if the fix is applied.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability could allow an attacker with local access to read sensitive memory contents, potentially exposing confidential data. It requires user interaction and has low attack complexity but does not affect system integrity or availability.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability is an out-of-bounds read issue in a library component, which primarily risks exposing sensitive data (high confidentiality impact per CVSS). While it does not directly affect integrity or availability, unauthorized memory access could lead to data leaks. Compliance implications depend on the specific use case, but standards like GDPR and HIPAA require protecting personal and health data. A data breach from this flaw could violate such regulations, necessitating incident response and potential penalties.

Useful 0 Not Useful 0

Mitigation Strategies

Immediately update rz-libdemangle to a version that includes commit 6bf56d3 or later. If updating is not possible, ensure the library is not used in environments where demangling is required, as no workarounds are available.

Useful 0 Not Useful 0