LIEF

Blog • Documentation • About About The purpose of this project is to provide a cross-platform library to parse, modify and abstract ELF, PE and MachO formats. Main features : Parsing : LIEF can parse ELF, PE, MachO, COFF, OAT, DEX, VDEX, ART and provides a user-friendly API to access their...

MalConfig

MalConfig This is part of a module for the framework that i'm constantly developing. Robots images are provided by robohash.org Flag icons are provided by famfamfam The decoders were mostly making use of Androguard to extract the C2 or malware authors' credentials One of the decoder is making use...

amtracker

amtracker Android Malware Tracker This was originally part of a module for the framework that i'm constantly developing. The decoders were mostly making use of Androguard to extract the C2 or malware authors' credentials One of the decoder is making use of LIEF to extract the C2 from the android...

CVE-2019-14745

CVE-2019-14745 weaponized radare2 vulnerability CVE-2019-14745 assigned found by @CaptnBanana and blenk92 For details about vulnerability, read https://bananamafia.dev/post/r2-pwndebian/ Usage First of all, you need Python bindings of LIEF https://lief.quarkslab.com/ Then, run script as: python...

PYSEC-2026-1538 LIEF is vulnerable to segmentation fault

A security flaw has been discovered in lief-project LIEF up to 0.17.1. Affected by this issue is the function Parser::parsebinary of the file src/ELF/Parser.tcc of the component ELF Binary Parser. The manipulation results in null pointer dereference. The attack must be initiated from a local...

afs-file-validator (1.0.1), apkutils (>=1.0.2, <=1.0.4) +43 more potentially affected by CVE-2025-15504 via lief (>=0.9.0, <=0.17.1)

lief PYPI version =0.9.0, =1.0.2, =1.0.0, =0.1.0, =1.0.0, =0.0.0, =0.4.2, =0.0.1, =2024.9.24, =5.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.1 - famework 0.1.5 and more Source cves: CVE-2025-15504 Source advisory: OSV:PYSEC-2026-1538...

LIEF is vulnerable to segmentation fault

A security flaw has been discovered in lief-project LIEF up to 0.17.1. Affected by this issue is the function Parser::parsebinary of the file src/ELF/Parser.tcc of the component ELF Binary Parser. The manipulation results in null pointer dereference. The attack must be initiated from a local...

CVE-2025-15504

A security flaw has been discovered in lief-project LIEF up to 0.17.1. Affected by this issue is the function Parser::parsebinary of the file src/ELF/Parser.tcc of the component ELF Binary Parser. The manipulation results in null pointer dereference. The attack must be initiated from a local...

NULL Pointer Dereference

Overview lief is a LIEF - Library to Instrument Executable Formats. Affected versions of this package are vulnerable to NULL Pointer Dereference in the Parser::parsebinary function. An attacker can cause a denial of service by triggering a null pointer dereference through local access. Remediatio...

afs-file-validator (1.0.1), apkutils (>=1.0.2, <=1.0.4) +43 more potentially affected by CVE-2025-15504 via lief (>=0.9.0, <=0.17.1)

lief PYPI version =0.9.0, =1.0.2, =1.0.0, =0.1.0, =1.0.0, =0.0.0, =0.4.2, =0.0.1, =2024.9.24, =5.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.1 - famework 0.1.5 and more Source cves: CVE-2025-15504 Source advisory: SNYK:PYTHON-LIEF-14912565...

afs-file-validator (1.0.1), apkutils (>=1.0.2, <=1.0.4) +43 more potentially affected by CVE-2025-15504 via lief (>=0.9.0, <=0.17.1)

lief PYPI version =0.9.0, =1.0.2, =1.0.0, =0.1.0, =1.0.0, =0.0.0, =0.4.2, =0.0.1, =2024.9.24, =5.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.1 - famework 0.1.5 and more Source cves: CVE-2025-15504 Source advisory: OSV:GHSA-MJJP-XJFG-97WG...

LIEF is vulnerable to segmentation fault

A security flaw has been discovered in lief-project LIEF up to 0.17.1. Affected by this issue is the function Parser::parsebinary of the file src/ELF/Parser.tcc of the component ELF Binary Parser. The manipulation results in null pointer dereference. The attack must be initiated from a local...

GHSA-MJJP-XJFG-97WG LIEF is vulnerable to segmentation fault

A security flaw has been discovered in lief-project LIEF up to 0.17.1. Affected by this issue is the function Parser::parsebinary of the file src/ELF/Parser.tcc of the component ELF Binary Parser. The manipulation results in null pointer dereference. The attack must be initiated from a local...

afs-file-validator (1.0.1), apkutils (>=1.0.2, <=1.0.4) +43 more potentially affected by CVE-2025-15504 via lief (>=0.9.0, <=0.17.1)

lief PYPI version =0.9.0, =1.0.2, =1.0.0, =0.1.0, =1.0.0, =0.0.0, =0.4.2, =0.0.1, =2024.9.24, =5.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.1 - famework 0.1.5 and more Source cves: CVE-2025-15504 Source advisory: GHSA-MJJP-XJFG-97WG...

CVE-2025-15504

A security flaw has been discovered in lief-project LIEF up to 0.17.1. Affected by this issue is the function Parser::parsebinary of the file src/ELF/Parser.tcc of the component ELF Binary Parser. The manipulation results in null pointer dereference. The attack must be initiated from a local...

EUVD-2026-1850

A security flaw has been discovered in lief-project LIEF up to 0.17.1. Affected by this issue is the function Parser::parsebinary of the file src/ELF/Parser.tcc of the component ELF Binary Parser. The manipulation results in null pointer dereference. The attack must be initiated from a local...

CVE-2025-15504 lief-project LIEF ELF Binary Parser.tcc parse_binary null pointer dereference

A security flaw has been discovered in lief-project LIEF up to 0.17.1. Affected by this issue is the function Parser::parsebinary of the file src/ELF/Parser.tcc of the component ELF Binary Parser. The manipulation results in null pointer dereference. The attack must be initiated from a local...

CVE-2025-15504 lief-project LIEF ELF Binary Parser.tcc parse_binary null pointer dereference

A security flaw has been discovered in lief-project LIEF up to 0.17.1. Affected by this issue is the function Parser::parsebinary of the file src/ELF/Parser.tcc of the component ELF Binary Parser. The manipulation results in null pointer dereference. The attack must be initiated from a local...

CVE-2025-15504

The vulnerability is in lief-project LIEF up to 0.17.1, affecting the ELF Binary Parser’s function Parser::parse_binary in src/ELF/Parser.tcc and causing a null pointer dereference . Exploitation requires local access; a public exploit exists. Upgrade to version 0.17.2 to resolve the issue (patch...

CVE-2025-15504 lief-project LIEF ELF Binary Parser.tcc parse_binary null pointer dereference

A security flaw has been discovered in lief-project LIEF up to 0.17.1. Affected by this issue is the function Parser::parsebinary of the file src/ELF/Parser.tcc of the component ELF Binary Parser. The manipulation results in null pointer dereference. The attack must be initiated from a local...