Skip to content
OpenAdvisories
Medium · 6.5 CVE-2022-40923 EUVD-2022-0144GHSA-rm2x-hgr8-w343PYSEC-2022-43139

LIEF vulnerable to denial of service through segmentation fault

Published Sep 30, 2022 · Updated May 20, 2025 · Assigned by mitre

Description

A vulnerability in the LIEF::MachO::SegmentCommand::virtual_address function of LIEF v0.12.1 allows attackers to cause a denial of service (DOS) through a segmentation fault via a crafted MachO file.

Affected packages

EcosystemPackageAffectedFixedRecord
PyPI lief <= 0.12.1 — GHSA-rm2x-hgr8-w343

References