GitHub Advisoryadvisory · PyPI

GHSA-x2xx-jw5m-5j86 LIEF contains segmentation violation

MEDIUM Published 2022-09-14 Modified 2022-09-20 Official page ↗
Aliases
CVE-2022-38307
Ecosystem
PyPI
Packages
lief
Severity
Moderate
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Weaknesses
CWE-476
Reviewed
2022-09-20

Affected packages

• PyPI lief: < 0.12.1 → fixed in 0.12.1

Description

LIEF commit 5d1d643 was discovered to contain a segmentation violation via the function `LIEF::MachO::SegmentCommand::file_offset()` at `/MachO/SegmentCommand.cpp`. Commit 7acf0bc4224081d4f425fcc8b2e361b95291d878 contains a patch.

Related

Alias · CVE (1)

  • CVE-2022-38307 LIEF commit 5d1d643 was discovered to contain a segmentation violation via the function LIEF::MachO::SegmentCommand::file_offset() at… vulnerability

Weakness · CWE (1)

  • CWE-476 NULL Pointer Dereference weakness

References