Skip to content
OpenAdvisories
Medium · 6.5 CVE-2022-43171 EUVD-2022-0145GHSA-jvp9-phwp-p738PYSEC-2022-43140

LIEF heap buffer overflow in the LIEF::MachO::BinaryParser::parse_dyldinfo_generic_bind

Published Nov 17, 2022 · Updated Apr 29, 2025 · Assigned by mitre

Description

A heap buffer overflow in the LIEF::MachO::BinaryParser::parse_dyldinfo_generic_bind function of LIEF v0.12.1 allows attackers to cause a Denial of Service (DoS) via a crafted MachO file.

Affected packages

EcosystemPackageAffectedFixedRecord
PyPI lief < 0.12.3 0.12.3 GHSA-jvp9-phwp-p738

References