Executive brief
LIEF commit 365a16a was discovered to contain a heap-buffer overflow via the function print_binary at /c/macho_reader.c.
Affected products
- PyPI lief
Junglewise Threat Intelligence
CVE-2022-38495: PYSEC-2022-276 - LIEF commit 365a16a was discovered to contain a heap-buffer overflow via the function print_binary at /c/macho_reader.c.
CVE-2022-38495 · Severity: low · CVSS 3.1 · Published 2022-09-13
Technologies: lief (PyPI). Vendors: PyPI.
Related threats
- PYSEC-2026-1538 - LIEF is vulnerable to segmentation fault
- LIEF uninitialized variable in machd_reader.c
- PYSEC-2022-43140 - A heap buffer overflow in the LIEF::MachO::BinaryParser::parse_dyldinfo_generic_bind function of LIEF v0.12.1 allows attackers to cause a De
- PYSEC-2022-43138 - A vulnerability in the LIEF::MachO::BinaryParser::init_and_parse function of LIEF v0.12.1 allows attackers to cause a denial of service (DOS
- PYSEC-2022-43139 - A vulnerability in the LIEF::MachO::SegmentCommand::virtual_address function of LIEF v0.12.1 allows attackers to cause a denial of service (