{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"0.12.1"}],"component":"lief","cve_ids":["CVE-2022-40923"],"ecosystem":"PyPI","epss":0.00778,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-rm2x-hgr8-w343","id":"tcs_01M5KGHR4YD7TPRF079P2JFPW6","modified_at":"2024-11-25T22:42:22.400966Z","published_at":"2022-09-30T19:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2022-43139","https://github.com/lief-project/LIEF/issues/784"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"PYSEC-2022-43139","url":"https://osv.dev/vulnerability/PYSEC-2022-43139"}],"summary":"A vulnerability in the LIEF::MachO::SegmentCommand::virtual_address function of LIEF v0.12.1 allows attackers to cause a denial of service (DOS) through a segmentation fault via a crafted MachO file."}