CVE-2022-40922

A vulnerability in the LIEF::MachO::BinaryParser::initandparse function of LIEF v0.12.1 allows attackers to cause a denial of service DOS through a segmentation fault via a crafted MachO file...

PYSEC-2022-43138

A vulnerability in the LIEF::MachO::BinaryParser::initandparse function of LIEF v0.12.1 allows attackers to cause a denial of service DOS through a segmentation fault via a crafted MachO file...

CVE-2022-40922

A vulnerability in the LIEF::MachO::BinaryParser::initandparse function of LIEF v0.12.1 allows attackers to cause a denial of service DOS through a segmentation fault via a crafted MachO file...

Design/Logic Flaw

A vulnerability in the LIEF::MachO::BinaryParser::initandparse function of LIEF v0.12.1 allows attackers to cause a denial of service DOS through a segmentation fault via a crafted MachO file...

PYSEC-2022-43138

A vulnerability in the LIEF::MachO::BinaryParser::initandparse function of LIEF v0.12.1 allows attackers to cause a denial of service DOS through a segmentation fault via a crafted MachO file...

CVE-2022-40922

A vulnerability in the LIEF::MachO::BinaryParser::initandparse function of LIEF v0.12.1 allows attackers to cause a denial of service DOS through a segmentation fault via a crafted MachO file...

CVE-2022-40922

CVE-2022-40922 concerns LIEF v0.12.1, where the LIEF::MachO::BinaryParser::init_and_parse function is vulnerable to denial of service via a crafted Mach-O file, caused by improper handling of error messages in init_and_parse. Public sources consistently describe a DOS achievable through a segment...

CVE-2022-40922

A vulnerability in the LIEF::MachO::BinaryParser::initandparse function of LIEF v0.12.1 allows attackers to cause a denial of service DOS through a segmentation fault via a crafted MachO file...

PT-2022-25620 · Lief · Lief

Name of the Vulnerable Software and Affected Versions: LIEF version 0.12.1 Description: A vulnerability in the LIEF::MachO::BinaryParser::init and parse function allows attackers to cause a denial of service DOS through a segmentation fault via a crafted MachO file. Recommendations: For LIEF...

LIEF 安全漏洞

LIEF is a cross-platform library from the personal developer Romain Thomas. Used for parsing, modifying and abstracting Elf, Pe and MachO formats, a denial of service vulnerability exists in LIEF v0.12.1, which stems from a failure to properly handle incoming error messages in the initandparse...

LIEF vulnerable to denial of service through segmentation fault

A vulnerability in the LIEF::MachO::SegmentCommand::virtualaddress function of LIEF v0.12.1 allows attackers to cause a denial of service DOS through a segmentation fault via a crafted MachO file. A patch is available at commit number 24935f654f6df700a9a062298258b9485f584502...

CVE-2022-40923

A vulnerability in the LIEF::MachO::SegmentCommand::virtualaddress function of LIEF v0.12.1 allows attackers to cause a denial of service DOS through a segmentation fault via a crafted MachO file...

Design/Logic Flaw

A vulnerability in the LIEF::MachO::SegmentCommand::virtualaddress function of LIEF v0.12.1 allows attackers to cause a denial of service DOS through a segmentation fault via a crafted MachO file...

PYSEC-2022-43139

A vulnerability in the LIEF::MachO::SegmentCommand::virtualaddress function of LIEF v0.12.1 allows attackers to cause a denial of service DOS through a segmentation fault via a crafted MachO file...

PYSEC-2022-43139

A vulnerability in the LIEF::MachO::SegmentCommand::virtualaddress function of LIEF v0.12.1 allows attackers to cause a denial of service DOS through a segmentation fault via a crafted MachO file...

CVE-2022-40923

A vulnerability in the LIEF::MachO::SegmentCommand::virtualaddress function of LIEF v0.12.1 allows attackers to cause a denial of service DOS through a segmentation fault via a crafted MachO file...

CVE-2022-40923

A vulnerability in the LIEF::MachO::SegmentCommand::virtualaddress function of LIEF v0.12.1 allows attackers to cause a denial of service DOS through a segmentation fault via a crafted MachO file...

CVE-2022-40923

The CVE-2022-40923 entry concerns LIEF v0.12.1, where the LIEF::MachO::SegmentCommand::virtual_address function can trigger a denial of service via a crafted Mach-O file, caused by a segmentation fault. This is a concrete vulnerability affecting the Mach-O handling code path, with an impact on av...

CVE-2022-40923

A vulnerability in the LIEF::MachO::SegmentCommand::virtualaddress function of LIEF v0.12.1 allows attackers to cause a denial of service DOS through a segmentation fault via a crafted MachO file...

PT-2022-25621 · Lief · Lief

Name of the Vulnerable Software and Affected Versions: LIEF version 0.12.1 Description: A vulnerability in the LIEF::MachO::SegmentCommand::virtual address function allows attackers to cause a denial of service DOS through a segmentation fault via a crafted MachO file. Recommendations: For LIEF...