CVE-2024-31636

An issue in LIEF v.0.14.1 allows a local attacker to obtain sensitive information via the name parameter of the machdreader.c component...

UBUNTU-CVE-2024-31636

An issue in LIEF v.0.14.1 allows a local attacker to obtain sensitive information via the name parameter of the machdreader.c component...

CVE-2024-31636

An issue in LIEF v.0.14.1 allows a local attacker to obtain sensitive information via the name parameter of the machdreader.c component...

CVE-2024-31636

An issue in LIEF v.0.14.1 allows a local attacker to obtain sensitive information via the name parameter of the machdreader.c component...

PT-2024-24171 · Lief +1 · Lief +1

Name of the Vulnerable Software and Affected Versions: LIEF version 0.14.1 Description: An issue in the machd reader.c component allows a local attacker to obtain sensitive information via the name parameter. Recommendations: For LIEF version 0.14.1, consider restricting access to the name...

CVE-2024-31636

CVE-2024-31636, affecting LIEF v0.14.1, enables local information disclosure via the name parameter in machd_reader.c. Root cause: input handling flaw in machd_reader.c leading to sensitive data exposure. Affected product/version: LIEF 0.14.1. Exploitation: local. No patch details provided in the...

CVE-2024-31636

An issue in LIEF v.0.14.1 allows a local attacker to obtain sensitive information via the name parameter of the machdreader.c component...

CVE-2024-31636

An issue in LIEF v.0.14.1 allows a local attacker to obtain sensitive information via the name parameter of the machdreader.c component...

LIEF 安全漏洞

LIEF is a cross-platform library from the individual developer Romain Thomas. It is used to parse, modify and abstract Elf, Pe and MachO formats. A security vulnerability exists in LIEF version v.0.14.1, which stems from allowing a local attacker to obtain sensitive information via the name...

CVE-2024-31636

An issue in LIEF v.0.14.1 allows a local attacker to obtain sensitive information via the name parameter of the machdreader.c component...

Denial Of Service (DoS)

lief is vulnerable to denial of service. The vulnerability exists due to heap-buffer-overflow in the parsedyldinfogenericbind function of BinaryParser.tcc, allowing an attacker to cause an application crash through the maliciously crafted MachO file...

GHSA-JVP9-PHWP-P738 LIEF heap buffer overflow in the LIEF::MachO::BinaryParser::parse_dyldinfo_generic_bind

A heap buffer overflow in the LIEF::MachO::BinaryParser::parsedyldinfogenericbind function of LIEF prior to version 0.12.3 allows attackers to cause a Denial of Service DoS via a crafted MachO file...

LIEF heap buffer overflow in the LIEF::MachO::BinaryParser::parse_dyldinfo_generic_bind

A heap buffer overflow in the LIEF::MachO::BinaryParser::parsedyldinfogenericbind function of LIEF prior to version 0.12.3 allows attackers to cause a Denial of Service DoS via a crafted MachO file...

CVE-2022-43171

A heap buffer overflow in the LIEF::MachO::BinaryParser::parsedyldinfogenericbind function of LIEF v0.12.1 allows attackers to cause a Denial of Service DoS via a crafted MachO file...

Heap overflow

A heap buffer overflow in the LIEF::MachO::BinaryParser::parsedyldinfogenericbind function of LIEF v0.12.1 allows attackers to cause a Denial of Service DoS via a crafted MachO file...

PYSEC-2022-43140

A heap buffer overflow in the LIEF::MachO::BinaryParser::parsedyldinfogenericbind function of LIEF v0.12.1 allows attackers to cause a Denial of Service DoS via a crafted MachO file...

LIEF 缓冲区错误漏洞

LIEF is a cross-platform library from the individual developer Romain Thomas. It is used to parse, modify and abstract Elf, Pe and MachO formats. A security vulnerability exists in LIEF version v0.12.1, which stems from a heap buffer overflow in the...

PT-2022-26788 · Lief · Lief

Name of the Vulnerable Software and Affected Versions: LIEF versions prior to 0.12.3 Description: A heap buffer overflow in the parse dyldinfo generic bind function of LIEF's BinaryParser allows attackers to cause a Denial of Service DoS via a crafted MachO file. Recommendations: For versions pri...

CVE-2022-43171

CVE-2022-43171 affects the LIEF library’s MachO parser: heap buffer overflow in LIEF::MachO::BinaryParser::parse_dyldinfo_generic_bind on v0.12.1, leading to DoS via a crafted Mach-O file. Public details show vulnerability in LIEF v0.12.1 (and related advisories mention pre-0.12.3) with mitigatio...

CVE-2022-43171

A heap buffer overflow in the LIEF::MachO::BinaryParser::parsedyldinfogenericbind function of LIEF v0.12.1 allows attackers to cause a Denial of Service DoS via a crafted MachO file...