A heap overflow in the mach0_chained_fixups.c component of Rizin occurs when parsing a mach0 file containing malformed chained segment entries. The flaw, classified as CWE-770, can corrupt memory and, if exploited, may lead to arbitrary code execution or other severe stability violations. The description specifically indicates that the vulnerability can be exploited when a malicious file is processed by the application.

The problem exists in all releases of Rizin prior to version 0.8.2, affecting all platforms supported by the project. The vendor rizinorg has supplied a fix in the 0.8.2 release, so any installation using an earlier version is affected.

The CVSS score of 4.4 rates the issue as moderate, and the EPSS score of less than 1% suggests that real‑world exploitation is unlikely. The vulnerability requires that the attacker supply a crafted mach0 file to the program, meaning it can be exercised locally or via a supplied file on a shared system. The flaw is not listed in CISA's KEV catalog, further indicating low prevalence in the wild.