GHSA-x2xx-jw5m-5j86

LIEF contains segmentation violation

Source: GitHub Advisory Database (reviewed) Moderate CVE-2022-38307

Packages

Ecosystem	Package	Affected	Fixed in
PyPI	lief	< 0.12.1	0.12.1

Details

As written in the advisory (Markdown source, shown as plain text).

LIEF commit 5d1d643 was discovered to contain a segmentation violation via the function `LIEF::MachO::SegmentCommand::file_offset()` at `/MachO/SegmentCommand.cpp`. Commit 7acf0bc4224081d4f425fcc8b2e361b95291d878 contains a patch.

References

External links from the advisory. They lead to third-party sites.

https://nvd.nist.gov/vuln/detail/CVE-2022-38307 advisory
https://github.com/lief-project/LIEF/issues/764 web
https://github.com/lief-project/LIEF/commit/7acf0bc4224081d4f425fcc8b2e361b95291d878 web
https://github.com/pypa/advisory-database/tree/main/vulns/lief/PYSEC-2022-275.yaml web