MEDIUM6.5

PYSEC-2022-43140

Quick fix

PYSEC-2022-43140 — lief: upgrade to the fixed version with the command below.

pip install --upgrade 'lief>=0.12.3'

Details

A heap buffer overflow in the LIEF::MachO::BinaryParser::parse_dyldinfo_generic_bind function of LIEF v0.12.1 allows attackers to cause a Denial of Service (DoS) via a crafted MachO file.

Are you affected?

Enter the version of the package you're using.

Affected packages

PyPI/lief

Introduced in: 0Fixed in: 0.12.3

Fixpip install --upgrade 'lief>=0.12.3'

References

https://github.com/lief-project/LIEF/issues/782[REPORT]