Skip to content
OpenAdvisories
High · 7.8 CVE-2022-38495 EUVD-2022-0140GHSA-42vg-2q93-fj6jPYSEC-2022-276

LIEF vulnerable to heap based buffer overflow via print_binary function

Published Sep 13, 2022 · Updated Aug 3, 2024 · Assigned by mitre

Description

LIEF commit 365a16a was discovered to contain a heap-buffer overflow via the function print_binary at /c/macho_reader.c.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Ubuntu 22.04 LTS lief No fix yet —
Ubuntu 20.04 LTS lief No fix yet —

Affected packages

EcosystemPackageAffectedFixedRecord
PyPI lief <= 0.12.1 — GHSA-42vg-2q93-fj6j
PyPI lief < 0.12.1 0.12.1 PYSEC-2022-276

References