CVE-2022-38496

PyPI/lief CVE-2022-38496: medium 5.5, EPSS 0.30%

LIEF commit 365a16a was discovered to contain a reachable assertion abort via the component BinaryStream.hpp.

Action: Upgrade lief to 0.12.2 or later.

pip install lief==0.12.2

Affected

Fixed versions

Sources

• osv: PYSEC-2022-43137
• https://github.com/lief-project/LIEF/issues/765

CVE-2022-38496 · published 2022-09-13T21:15:00Z · modified 2024-11-21T14:57:34.587927Z · JSON