PyPI/pypatchelf CVE-2022-44940: critical 9.1, EPSS 1.09%

Patchelf v0.9 was discovered to contain an out-of-bounds read via the function modifyRPath at src/patchelf.cc.

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: PYSEC-2022-43151
• https://github.com/NixOS/patchelf/pull/419

CVE-2022-44940 · published 2022-12-19T22:15:00Z · modified 2024-11-25T22:42:12.915518Z · JSON