LIEF contains a segmentation violation

MEDIUM 5.5CVE-2022-38497 · GHSA-2p5h-hpj4-fxgg · PYSEC-2022-277 · Published 13/09/2022 · updated 17/06/2026

In short

CVE-2022-38497 is a MEDIUM (CVSS 5.5) vulnerability affecting lief, lief (lief-project).
Chance of exploitation in the next 30 days (EPSS): 0.30%, higher than 23.1% of all vulnerabilities.
Fix: update to 0.12.1 or later.

Package	Affected versions	Patched versions
lief PyPI	`≤ 0.12.1< 0.12.1`	`0.12.1`
lief lief-project	`≤ 0.12.1`	No fix yet

Description

LIEF commit 365a16a was discovered to contain a segmentation violation via the component CoreFile.tcc:69. A patch is available at commit ca938740264f1fcb18f91cba8e4039c518ecb75b.

NVD description

LIEF commit 365a16a was discovered to contain a segmentation violation via the component CoreFile.tcc:69.

References

nvd.nist.gov/vuln/detail/CVE-2022-38497 · ADVISORY
lief-project/LIEF · WEB
lief-project/LIEF commit ca93874 · WEB
lief-project/LIEF · PACKAGE
pypa/advisory-database · WEB
GitHub Advisory GHSA-2p5h-hpj4-fxgg · ADVISORY

More vulnerabilities in lief

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

lief

PyPI

≤ 0.12.1< 0.12.1

0.12.1

lief

lief-project

≤ 0.12.1

No fix yet

More vulnerabilities in lief

See all →