Skip to main content
cve.nowby Sazabi
← PyPI
PyPIPackage

lief

11 known vulnerabilities (3 medium, 1 low), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
11 · 3 medium, 1 low
Registry
PyPI

Advisories 11

  • CVE-2025-15504Medium 4.8

    lief-project LIEF ELF Binary Parser.tcc parse_binary null pointer dereference

    Affected: fixed in 0.17.2.

  • An issue in LIEF v.0.14.1 allows a local attacker to obtain sensitive information via the name parameter of the machd_reader.c component.

    Affected: through 0.14.1; fixed in 0.15.0.

  • CVE-2022-43171Medium 6.5

    A heap buffer overflow in the LIEF::MachO::BinaryParser::parse_dyldinfo_generic_bind function of LIEF v0.12.1 allows attackers to cause a…

    Affected: fixed in 0.12.3.

  • A vulnerability in the LIEF::MachO::BinaryParser::init_and_parse function of LIEF v0.12.1 allows attackers to cause a denial of service…

    Affected: fixed in 0.12.2.

  • CVE-2022-40923Medium 6.5

    A vulnerability in the LIEF::MachO::SegmentCommand::virtual_address function of LIEF v0.12.1 allows attackers to cause a denial of service…

    Affected: through 0.12.1.

  • LIEF commit 365a16a was discovered to contain a segmentation violation via the component CoreFile.tcc:69.

    Affected: fixed in 0.12.1; through 0.12.1.

  • LIEF commit 365a16a was discovered to contain a reachable assertion abort via the component BinaryStream.hpp.

    Affected: fixed in 0.12.2.

  • LIEF commit 365a16a was discovered to contain a heap-buffer overflow via the function print_binary at /c/macho_reader.c.

    Affected: through 0.12.1; fixed in 0.12.1.

  • LIEF commit 5d1d643 was discovered to contain a segmentation violation via the function LIEF::MachO::SegmentCommand::file_offset() at…

    Affected: fixed in 0.12.1.

  • LIEF commit 5d1d643 was discovered to contain a heap-buffer overflow in the component /core/CorePrPsInfo.tcc.

    Affected: fixed in 0.12.1; through 0.12.1.

  • An issue was discovered in LIEF through 0.11.4.

    Affected: fixed in 0.11.0; fixed in 0.11.5.