Executive brief
LIEF commit 365a16a was discovered to contain a reachable assertion abort via the component BinaryStream.hpp.
Affected products
- PyPI lief
Junglewise Threat Intelligence
CVE-2022-38496: PYSEC-2022-43137 - LIEF commit 365a16a was discovered to contain a reachable assertion abort via the component BinaryStream.hpp.
CVE-2022-38496 · Severity: low · CVSS 3.1 · Published 2022-09-13
Technologies: lief (PyPI). Vendors: PyPI.
Related threats
- PYSEC-2026-1538 - LIEF is vulnerable to segmentation fault
- LIEF uninitialized variable in machd_reader.c
- PYSEC-2022-43140 - A heap buffer overflow in the LIEF::MachO::BinaryParser::parse_dyldinfo_generic_bind function of LIEF v0.12.1 allows attackers to cause a De
- PYSEC-2022-43138 - A vulnerability in the LIEF::MachO::BinaryParser::init_and_parse function of LIEF v0.12.1 allows attackers to cause a denial of service (DOS
- PYSEC-2022-43139 - A vulnerability in the LIEF::MachO::SegmentCommand::virtual_address function of LIEF v0.12.1 allows attackers to cause a denial of service (