PyPI/lief CVE-2022-38306: medium 5.5, EPSS 0.34%

LIEF vulnerable to heap based buffer overflow

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: GHSA-52xx-r3g2-p8jm
• https://nvd.nist.gov/vuln/detail/CVE-2022-38306
• https://github.com/lief-project/LIEF/issues/763
• https://github.com/lief-project/LIEF/commit/53bf680ef494a835e2c4a5de328ca85416a03a5a
• https://github.com/lief-project/LIEF
• https://github.com/pypa/advisory-database/tree/main/vulns/lief/PYSEC-2022-274.yaml

CVE-2022-38306 · published 2022-09-14T00:00:42Z · modified 2023-11-08T04:10:11.559655Z · JSON