Executive brief
A vulnerability in the LIEF::MachO::SegmentCommand::virtual_address function of LIEF v0.12.1 allows attackers to cause a denial of service (DOS) through a segmentation fault via a crafted MachO file.
Affected products
- PyPI lief
Junglewise Threat Intelligence
CVE-2022-40923: PYSEC-2022-43139 - A vulnerability in the LIEF::MachO::SegmentCommand::virtual_address function of LIEF v0.12.1 allows attackers to cause a denial of service (
CVE-2022-40923 · Severity: low · CVSS 3.1 · Published 2022-09-30
Technologies: lief (PyPI). Vendors: PyPI.
Related threats
- PYSEC-2026-1538 - LIEF is vulnerable to segmentation fault
- LIEF uninitialized variable in machd_reader.c
- PYSEC-2022-43140 - A heap buffer overflow in the LIEF::MachO::BinaryParser::parse_dyldinfo_generic_bind function of LIEF v0.12.1 allows attackers to cause a De
- PYSEC-2022-43138 - A vulnerability in the LIEF::MachO::BinaryParser::init_and_parse function of LIEF v0.12.1 allows attackers to cause a denial of service (DOS
- PYSEC-2022-275 - LIEF commit 5d1d643 was discovered to contain a segmentation violation via the function LIEF::MachO::SegmentCommand::file_offset() at /MachO