GitHub Advisoryadvisory · PyPI

GHSA-22x7-vwh9-5w4g LIEF heap-buffer-overflow

HIGH Published 2022-05-24 Modified 2024-09-30 Official page ↗
Aliases
CVE-2021-32297
Ecosystem
PyPI
Packages
lief
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weaknesses
CWE-787
Reviewed
2024-02-01

Affected packages

• PyPI lief: < 0.11.0 → fixed in 0.11.0

Description

An issue was discovered in LIEF prior to version 0.11.0. A heap-buffer-overflow exists in the function main located in `pe_reader.c`. It allows an attacker to cause code Execution.

Related

Alias · CVE (1)

  • CVE-2021-32297 An issue was discovered in LIEF through 0.11.4. vulnerability

Weakness · CWE (1)

  • CWE-787 Out-of-bounds Write weakness

References