Vulnerabilities > CVE-2022-38307 - NULL Pointer Dereference vulnerability in Lief-Project Lief

CVSS 5.5 - MEDIUM

Attack vector

LOCAL

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

HIGH

local

low complexity

lief-project

CWE-476

NVD

Published: 2022-09-13

Updated: 2023-08-08

Summary

LIEF commit 5d1d643 was discovered to contain a segmentation violation via the function LIEF::MachO::SegmentCommand::file_offset() at /MachO/SegmentCommand.cpp.

Vulnerable Configurations

Part	Description	Count
Application	Lief-Project Lief Project Lief - Lief Project Lief 0.6.0 Lief Project Lief 0.6.1 Lief Project Lief 0.7.0 Lief Project Lief 0.8.0 Lief Project Lief 0.8.1 Lief Project Lief 0.8.2 Lief Project Lief 0.8.3 Lief Project Lief 0.9.0 Lief Project Lief 0.10.0 Lief Project Lief 0.10.1 Lief Project Lief 0.11.0 Lief Project Lief 0.11.1 Lief Project Lief 0.11.2 Lief Project Lief 0.11.3 Lief Project Lief 0.11.4 Lief Project Lief 0.11.5 Lief Project Lief 0.12.0 Lief Project Lief 0.12.1	19

Common Weakness Enumeration (CWE)

CWE-476 - NULL Pointer Dereference

References

https://github.com/lief-project/LIEF/issues/764