Vulnerabilities for lief

First version without a known vulnerability: 0.17.2

Details

• GHSA-mjjp-xjfg-97wg2026-01-10

  LIEF is vulnerable to segmentation fault

  Fixed in: 0.17.2

• GHSA-377p-g8gr-5wpg2024-05-03

  LIEF obtain sensitive information via the name parameter

  Fixed in: 0.15.0

• GHSA-jvp9-phwp-p7382022-11-18

  LIEF heap buffer overflow in the LIEF::MachO::BinaryParser::parse_dyldinfo_generic_bind

  Fixed in: 0.12.3

• GHSA-38hf-c37x-32hv2022-10-04

  LIEF vulnerable to denial of service through segmentation fault

  Fixed in: 0.12.2

• GHSA-rm2x-hgr8-w3432022-10-01

  LIEF vulnerable to denial of service through segmentation fault

• GHSA-2p5h-hpj4-fxgg2022-09-14

  LIEF contains a segmentation violation

  Fixed in: 0.12.1

• GHSA-42vg-2q93-fj6j2022-09-14

  LIEF vulnerable to heap based buffer overflow via print_binary function

  Fixed in: 0.12.1

• GHSA-52xx-r3g2-p8jm2022-09-14

  LIEF vulnerable to heap based buffer overflow

  Fixed in: 0.12.1

• GHSA-x2xx-jw5m-5j862022-09-14

  LIEF contains segmentation violation

  Fixed in: 0.12.1

• PYSEC-2022-431372022-09-13

  LIEF commit 365a16a was discovered to contain a reachable assertion abort via the component BinaryStream.hpp.

  Fixed in: 0.12.2

• GHSA-22x7-vwh9-5w4g2022-05-24

  LIEF heap-buffer-overflow

  Fixed in: 0.11.0, 0.11.5