high6.5
CVE-2022-43171
LIEF heap buffer overflow in the LIEF::MachO::BinaryParser::parse_dyldinfo_generic_bind
Impact
A heap buffer overflow in the LIEF::MachO::BinaryParser::parse_dyldinfo_generic_bind function of LIEF prior to version 0.12.3 allows attackers to cause a Denial of Service (DoS) via a crafted MachO file.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| pip | lief | < 0.12.3 | 0.12.3 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Lief-Project | Lief | Version 0.12.1 |