GHSA-22x7-vwh9-5w4g

LIEF heap-buffer-overflow

Source: GitHub Advisory Database (reviewed) High CVE-2021-32297

Packages

Ecosystem	Package	Affected	Fixed in
PyPI	lief	< 0.11.0	0.11.0

Details

As written in the advisory (Markdown source, shown as plain text).

An issue was discovered in LIEF prior to version 0.11.0. A heap-buffer-overflow exists in the function main located in `pe_reader.c`. It allows an attacker to cause code Execution.

References

External links from the advisory. They lead to third-party sites.

https://nvd.nist.gov/vuln/detail/CVE-2021-32297 advisory
https://github.com/lief-project/LIEF/issues/449 web
https://github.com/lief-project/LIEF/commit/19e06755e8ce1ecf136360a5c36cded3701ac253 web
https://github.com/lief-project/LIEF package
https://github.com/pypa/advisory-database/tree/main/vulns/lief/PYSEC-2021-324.yaml web