PyPI/lief CVE-2022-40922: medium 6.5, EPSS 0.70%

LIEF vulnerable to denial of service through segmentation fault

Action: Upgrade lief to 0.12.2 or later.

pip install lief==0.12.2

Affected

Fixed versions

Sources

• osv: GHSA-38hf-c37x-32hv
• https://nvd.nist.gov/vuln/detail/CVE-2022-40922
• https://github.com/lief-project/LIEF/issues/781
• https://github.com/lief-project/LIEF/commit/ad811916670e83947560b6f3c45df6e71d3885af
• https://github.com/lief-project/LIEF/commit/fde2c48986739fabd2cf9b40b9af149a89c57850
• https://github.com/lief-project/LIEF
• https://github.com/pypa/advisory-database/tree/main/vulns/lief/PYSEC-2022-43138.yaml

CVE-2022-40922 · published 2022-10-04T00:00:25Z · modified 2024-12-07T05:31:53.881996Z · JSON