674 matches found
SUSE CVE-2017-16869
pmach.cpp in UPX 3.94 allows remote attackers to cause a denial of service invalid memory access and application crash or possibly have unspecified other impact via a crafted Mach-O file, related to canPack and unpack functions. NOTE: the vendor has stated "there is no security implication...
SUSE CVE-2019-20021
A heap-based buffer over-read was discovered in canUnpack in pmach.cpp in UPX 3.95 via a crafted Mach-O file...
SUSE CVE-2019-20053
An invalid memory address dereference was discovered in the canUnpack function in pmach.cpp in UPX 3.95 via a crafted Mach-O file...
Dridex Malware Now Attacking macOS Systems with Novel Infection Method
A variant of the infamous Dridex banking malware has set its sights on Apple's macOS operating system using a previously undocumented infection method, according to latest research. It has "adopted a new technique to deliver documents embedded with malicious macros to users without having to...
PYSEC-2022-43140
A heap buffer overflow in the LIEF::MachO::BinaryParser::parsedyldinfogenericbind function of LIEF v0.12.1 allows attackers to cause a Denial of Service DoS via a crafted MachO file...
Denial Of Service (DoS)
upx is vulnerable to denial of service. The vulnerability exists due to the invalid memory address references in adjABS function of plxelf.cpp, allowing an attacker to cause an application crash through the maliciously crafted Mach-O file...
Denial Of Service (DoS)
upx is vulnerable to denial of service. The vulnerability exists due to the invalid memory address references in elflookup function of plxelf.cpp, allowing an attacker to cause an application crash through the maliciously crafted Mach-O file...
Denial Of Service (DoS)
upx is vulnerable to denial of service. The vulnerability exists due to the heap-based buffer over-read in invertptdynamic function of plxelf.cpp, allowing an attacker to cause an application crash through the maliciously crafted Mach-O file...
Denial Of Service (DoS)
upx is vulnerable to denial of service. The vulnerability exists because the heap-based buffer over-read in accuagetbe32 function of miniacc.h, allowing an attacker to cause an application crash through the maliciously crafted Mach-O file...
Denial Of Service (DoS)
upx is vulnerable to denial of service. The vulnerability exists due to an floating point exception was discovered in the elflookup function in plxelf.cpp via a crafted Mach-O file...
Denial Of Service (DoS)
upx is vulnerable to denial of service. The vulnerability exists due to the heap-based buffer over-read in the getle64 function of bele.h, allowing an attacker to crash the application through the maliciously crafted Mach-O file...
Denial Of Service (DoS)
upx is vulnerable to denial of service. The vulnerability exists due to the heap-based buffer over-read in the getle32 function of bele.h, allowing an attacker to crash the application through the maliciously crafted Mach-O file...
GHSA-38HF-C37X-32HV LIEF vulnerable to denial of service through segmentation fault
A vulnerability in the LIEF::MachO::BinaryParser::initandparse function of LIEF v0.12.1 allows attackers to cause a denial of service DOS through a segmentation fault via a crafted MachO file. A patch for this issue is available at commit fde2c48986739fabd2cf9b40b9af149a89c57850...
GHSA-RM2X-HGR8-W343 LIEF vulnerable to denial of service through segmentation fault
A vulnerability in the LIEF::MachO::SegmentCommand::virtualaddress function of LIEF v0.12.1 allows attackers to cause a denial of service DOS through a segmentation fault via a crafted MachO file. A patch is available at commit number 24935f654f6df700a9a062298258b9485f584502...
LIEF 安全漏洞
LIEF is a cross-platform library from the individual developer Romain Thomas. It is used to parse, modify and abstract Elf, Pe and MachO formats. A security vulnerability exists in LIEF version v0.12.1. An attacker has exploited this vulnerability to cause a denial of service DOS via a segmentati...
North Korea's Lazarus Hackers Targeting macOS Users Interested in Crypto Jobs
The infamous Lazarus Group has continued its pattern of leveraging unsolicited job opportunities to deploy malware targeting Apple's macOS operating system. In the latest variant of the campaign observed by cybersecurity company SentinelOne last week, decoy documents advertising positions for the...
GLSA-202209-06 : Rizin: Multiple Vulnerabilities
The remote host is affected by the vulnerability described in GLSA-202209-06 Rizin: Multiple Vulnerabilities - Rizin v0.4.0 and below was discovered to contain an integer overflow via the function getlongobject. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted...
GHSA-X2XX-JW5M-5J86 LIEF contains segmentation violation
LIEF commit 5d1d643 was discovered to contain a segmentation violation via the function LIEF::MachO::SegmentCommand::fileoffset at /MachO/SegmentCommand.cpp. Commit 7acf0bc4224081d4f425fcc8b2e361b95291d878 contains a patch...
