tocsin

PyPI/lief CVE-2022-40923: medium 6.5, EPSS 0.78%

A vulnerability in the LIEF::MachO::SegmentCommand::virtual_address function of LIEF v0.12.1 allows attackers to cause a denial of service (DOS) through a segmentation fault via a crafted MachO file.

Action: No fix published. Pin and monitor.

Affected

introducedfixedlast affected
0-0.12.1

Fixed versions

No fixed version in the source.

Sources

CVE-2022-40923 · published · modified · JSON