A double free was discovered in Rizin's byte_pattern_search function within cmd_search.c, due to incorrect pointer ownership handling. This flaw allows memory corruption, potentially causing crashes or unforeseen behavior when the function processes user-supplied data. The vulnerability does not provide an explicit path for remote code execution but can lead to a denial of service by terminating the process.

The issue affects the Rizin framework provided by rizinorg. No specific version range is listed in the advisory, but the fix is included in commit 045fff363b42b8a6dda8ad5229c29ec3267e7dbe. Systems running versions of Rizin that have not incorporated this commit are vulnerable.

With a CVSS score of 3.3, the risk is considered low, and the EPSS score is not available. The vulnerability is not included in CISA's KEV catalog. The likely attack vector, inferred from the description, involves local execution of malicious input through Rizin's cmd_search functionality. While there is no known exploitation beyond potential denial of service, organizations should apply the patch promptly to prevent memory corruption issues.