GitHub Advisoryadvisory · PyPI

GHSA-2p5h-hpj4-fxgg LIEF contains a segmentation violation

MEDIUM Published 2022-09-14 Modified 2022-09-20 Official page ↗
Aliases
CVE-2022-38497
Ecosystem
PyPI
Packages
lief
Severity
Moderate
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Weaknesses
CWE-476
Reviewed
2022-09-20

Affected packages

• PyPI lief: <= 0.12.1 (no fix yet)

Description

LIEF commit 365a16a was discovered to contain a segmentation violation via the component `CoreFile.tcc:69`. A patch is available at commit ca938740264f1fcb18f91cba8e4039c518ecb75b.

Related

Alias · CVE (1)

  • CVE-2022-38497 LIEF commit 365a16a was discovered to contain a segmentation violation via the component CoreFile.tcc:69. vulnerability

Weakness · CWE (1)

  • CWE-476 NULL Pointer Dereference weakness

References