GitHub Advisoryadvisory · PyPI

GHSA-jvp9-phwp-p738 LIEF heap buffer overflow in the LIEF::MachO::BinaryParser::parse_dyldinfo_generic_bind

HIGH Published 2022-11-18 Modified 2025-04-29 Official page ↗
Aliases
CVE-2022-43171
Ecosystem
PyPI
Packages
lief
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Weaknesses
CWE-122, CWE-787
Reviewed
2024-11-21

Affected packages

• PyPI lief: < 0.12.3 → fixed in 0.12.3

Description

A heap buffer overflow in the LIEF::MachO::BinaryParser::parse_dyldinfo_generic_bind function of LIEF prior to version 0.12.3 allows attackers to cause a Denial of Service (DoS) via a crafted MachO file.

Related

Alias · CVE (1)

  • CVE-2022-43171 A heap buffer overflow in the LIEF::MachO::BinaryParser::parse_dyldinfo_generic_bind function of LIEF v0.12.1 allows attackers to cause a… vulnerability

Weakness · CWE (2)

  • CWE-122 Heap-based Buffer Overflow weakness
  • CWE-787 Out-of-bounds Write weakness

References