170 matches found
GHSA-377P-G8GR-5WPG LIEF obtain sensitive information via the name parameter
An issue in LIEF v.0.14.1 allows a local attacker to obtain sensitive information via the name parameter of the machdreader.c component...
LIEF obtain sensitive information via the name parameter
An issue in LIEF v.0.14.1 allows a local attacker to obtain sensitive information via the name parameter of the machdreader.c component...
PYSEC-2024-280
An issue in LIEF v.0.14.1 allows a local attacker to obtain sensitive information via the name parameter of the machdreader.c component...
DEBIAN-CVE-2024-31636
An issue in LIEF v.0.14.1 allows a local attacker to obtain sensitive information via the name parameter of the machdreader.c component...
CVE-2024-31636
An issue in LIEF v.0.14.1 allows a local attacker to obtain sensitive information via the name parameter of the machdreader.c component...
UBUNTU-CVE-2024-31636
An issue in LIEF v.0.14.1 allows a local attacker to obtain sensitive information via the name parameter of the machdreader.c component...
CVE-2024-31636
An issue in LIEF v.0.14.1 allows a local attacker to obtain sensitive information via the name parameter of the machdreader.c component...
CVE-2024-31636
An issue in LIEF v.0.14.1 allows a local attacker to obtain sensitive information via the name parameter of the machdreader.c component...
PT-2024-24171 · Lief +1 · Lief +1
Name of the Vulnerable Software and Affected Versions: LIEF version 0.14.1 Description: An issue in the machd reader.c component allows a local attacker to obtain sensitive information via the name parameter. Recommendations: For LIEF version 0.14.1, consider restricting access to the name...
CVE-2024-31636
CVE-2024-31636, affecting LIEF v0.14.1, enables local information disclosure via the name parameter in machd_reader.c. Root cause: input handling flaw in machd_reader.c leading to sensitive data exposure. Affected product/version: LIEF 0.14.1. Exploitation: local. No patch details provided in the...
CVE-2024-31636
An issue in LIEF v.0.14.1 allows a local attacker to obtain sensitive information via the name parameter of the machdreader.c component...
LIEF 安全漏洞
LIEF is a cross-platform library from the individual developer Romain Thomas. It is used to parse, modify and abstract Elf, Pe and MachO formats. A security vulnerability exists in LIEF version v.0.14.1, which stems from allowing a local attacker to obtain sensitive information via the name...
CVE-2024-31636
An issue in LIEF v.0.14.1 allows a local attacker to obtain sensitive information via the name parameter of the machdreader.c component...
CVE-2024-31636
An issue in LIEF v.0.14.1 allows a local attacker to obtain sensitive information via the name parameter of the machdreader.c component...
Denial Of Service (DoS)
lief is vulnerable to denial of service. The vulnerability exists due to heap-buffer-overflow in the parsedyldinfogenericbind function of BinaryParser.tcc, allowing an attacker to cause an application crash through the maliciously crafted MachO file...
LIEF heap buffer overflow in the LIEF::MachO::BinaryParser::parse_dyldinfo_generic_bind
A heap buffer overflow in the LIEF::MachO::BinaryParser::parsedyldinfogenericbind function of LIEF prior to version 0.12.3 allows attackers to cause a Denial of Service DoS via a crafted MachO file...
GHSA-JVP9-PHWP-P738 LIEF heap buffer overflow in the LIEF::MachO::BinaryParser::parse_dyldinfo_generic_bind
A heap buffer overflow in the LIEF::MachO::BinaryParser::parsedyldinfogenericbind function of LIEF prior to version 0.12.3 allows attackers to cause a Denial of Service DoS via a crafted MachO file...
CVE-2022-43171
A heap buffer overflow in the LIEF::MachO::BinaryParser::parsedyldinfogenericbind function of LIEF v0.12.1 allows attackers to cause a Denial of Service DoS via a crafted MachO file...
Heap overflow
A heap buffer overflow in the LIEF::MachO::BinaryParser::parsedyldinfogenericbind function of LIEF v0.12.1 allows attackers to cause a Denial of Service DoS via a crafted MachO file...