lief-project

Records11All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

lief-project records in CISA KEV

No lief-project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Lief 11 records MEDIUM

Records

11 records

TI-2022-21067 CVE-2022-43171 · GHSA-jvp9-phwp-p738

A heap buffer overflow in the LIEF::MachO::BinaryParser::parse_dyldinfo_generic_bind…

MEDIUM 62

A heap buffer overflow in the LIEF::MachO::BinaryParser::parse_dyldinfo_generic_bind function of LIEF v0.12.1 allows attackers to cause a Denial of Service (DoS) via a crafted MachO file.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00721 Published 2022-11-17 Fixed in 0.12.3 CWE-122

TI-2025-14143 CVE-2025-15504 · GHSA-mjjp-xjfg-97wg

lief-project LIEF ELF Binary Parser.tcc parse_binary null pointer dereference

MEDIUM 55

A security flaw has been discovered in lief-project LIEF up to 0.17.1.

CVSS 4.0MEDIUM 4.8 Local Low privileges No interaction EPSS 0.00265 Published 2026-01-10 Fixed in 0.17.2 CWE-404

TI-2024-20899 CVE-2024-31636 · GHSA-377p-g8gr-5wpg

An issue in LIEF v.0.14.1 allows a local attacker to obtain sensitive information via the…

MEDIUM 52

An issue in LIEF v.0.14.1 allows a local attacker to obtain sensitive information via the name parameter of the machd_reader.c component.

CVSS 3.1LOW 3.9 Local Low privileges User interaction EPSS 0.0024 Published 2024-05-03 Fixed in 0.15.0 CWE-457

TI-2021-12110 CVE-2021-32297 · GHSA-22x7-vwh9-5w4g

An issue was discovered in LIEF through 0.11.4.

MEDIUM 41

An issue was discovered in LIEF through 0.11.4.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01559 Published 2021-09-20 Fixed in 0.11.0 CWE-787

TI-2022-18111 CVE-2022-38495 · GHSA-42vg-2q93-fj6j

LIEF commit 365a16a was discovered to contain a heap-buffer overflow via the function print_binary at /c/macho_reader.c.

LOW 34

LIEF commit 365a16a was discovered to contain a heap-buffer overflow via the function print_binary at /c/macho_reader.c.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00343 Published 2022-09-13 No fix listed CWE-787

TI-2022-17963 CVE-2022-38306 · GHSA-52xx-r3g2-p8jm

LIEF commit 5d1d643 was discovered to contain a heap-buffer overflow in the component /core/CorePrPsInfo.tcc.

LOW 34

LIEF commit 5d1d643 was discovered to contain a heap-buffer overflow in the component /core/CorePrPsInfo.tcc.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00343 Published 2022-09-13 No fix listed CWE-787

TI-2022-19480 CVE-2022-40923 · GHSA-rm2x-hgr8-w343

A vulnerability in the LIEF::MachO::SegmentCommand::virtual_address function of LIEF…

LOW 30

A vulnerability in the LIEF::MachO::SegmentCommand::virtual_address function of LIEF v0.12.1 allows attackers to cause a denial of service (DOS) through a segmentation fault via a crafted MachO file.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00778 Published 2022-09-30 No fix listed CWE-20

TI-2022-19479 CVE-2022-40922 · GHSA-38hf-c37x-32hv

A vulnerability in the LIEF::MachO::BinaryParser::init_and_parse function of LIEF v0.12.1…

LOW 30

A vulnerability in the LIEF::MachO::BinaryParser::init_and_parse function of LIEF v0.12.1 allows attackers to cause a denial of service (DOS) through a segmentation fault via a crafted MachO file.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00698 Published 2022-10-03 Fixed in 0.12.2

TI-2022-18113 CVE-2022-38497 · GHSA-2p5h-hpj4-fxgg

LIEF commit 365a16a was discovered to contain a segmentation violation via the component CoreFile.tcc:69.

LOW 25

LIEF commit 365a16a was discovered to contain a segmentation violation via the component CoreFile.tcc:69.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00302 Published 2022-09-13 No fix listed CWE-476

TI-2022-18112 CVE-2022-38496 · GHSA-8j78-7q6f-p35c

LIEF commit 365a16a was discovered to contain a reachable assertion abort via the component BinaryStream.hpp.

LOW 25

LIEF commit 365a16a was discovered to contain a reachable assertion abort via the component BinaryStream.hpp.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.003 Published 2022-09-13 No fix listed CWE-617

TI-2022-17964 CVE-2022-38307 · GHSA-x2xx-jw5m-5j86

LIEF commit 5d1d643 was discovered to contain a segmentation violation via the function…

LOW 25

LIEF commit 5d1d643 was discovered to contain a segmentation violation via the function LIEF::MachO::SegmentCommand::file_offset() at /MachO/SegmentCommand.cpp.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00304 Published 2022-09-13 Fixed in 0.12.1 CWE-476

Open these records in search →

Critical	0
High	3
Medium	7
Low	1
No CVSS	0