Information Disclosure

lief is vulnerable to Information Disclosure. The vulnerability is due to improper handling of the name parameter in the machdreader.c component, allowing a local attacker to obtain sensitive information...

LIEF obtain sensitive information via the name parameter

An issue in LIEF v.0.14.1 allows a local attacker to obtain sensitive information via the name parameter of the machdreader.c component...

LIEF contains segmentation violation

LIEF commit 5d1d643 was discovered to contain a segmentation violation via the function LIEF::MachO::SegmentCommand::fileoffset at /MachO/SegmentCommand.cpp. Commit 7acf0bc4224081d4f425fcc8b2e361b95291d878 contains a patch...

CVE-2022-38306

LIEF commit 5d1d643 was discovered to contain a heap-buffer overflow in the component /core/CorePrPsInfo.tcc...

PYSEC-2022-277

LIEF commit 365a16a was discovered to contain a segmentation violation via the component CoreFile.tcc:69...

PT-2022-24356 · Lief · Lief

Name of the Vulnerable Software and Affected Versions: LIEF versions prior to 53bf680ef494a835e2c4a5de328ca85416a03a5a Description: A heap-buffer overflow was discovered in the component /core/CorePrPsInfo.tcc. The issue affects LIEF and is related to a heap-buffer overflow, which can be exploite...

GHSA-22X7-VWH9-5W4G LIEF heap-buffer-overflow

An issue was discovered in LIEF prior to version 0.11.0. A heap-buffer-overflow exists in the function main located in pereader.c. It allows an attacker to cause code Execution...