GHSA-42vg-2q93-fj6j

LIEF vulnerable to heap based buffer overflow via print_binary function

Source: GitHub Advisory Database (reviewed) High CVE-2022-38495

Packages

Ecosystem	Package	Affected	Fixed in
PyPI	lief	<= 0.12.1	no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

LIEF commit 365a16a was discovered to contain a heap-buffer overflow via the function `print_binary` at `/c/macho_reader.c`. Commit 0033b6312fd311b2e45e379c04a83d77c1e58578 contains a patch.

References

External links from the advisory. They lead to third-party sites.

https://nvd.nist.gov/vuln/detail/CVE-2022-38495 advisory
https://github.com/lief-project/LIEF/issues/767 web
https://github.com/lief-project/LIEF/commit/0033b6312fd311b2e45e379c04a83d77c1e58578 web
https://github.com/lief-project/LIEF package
https://github.com/pypa/advisory-database/tree/main/vulns/lief/PYSEC-2022-276.yaml web