MEDIUM6.5

PYSEC-2022-43138

Quick fix

PYSEC-2022-43138 — lief: upgrade to the fixed version with the command below.

pip install --upgrade 'lief>=0.12.2'

Details

A vulnerability in the LIEF::MachO::BinaryParser::init_and_parse function of LIEF v0.12.1 allows attackers to cause a denial of service (DOS) through a segmentation fault via a crafted MachO file.

Are you affected?

Enter the version of the package you're using.

Affected packages

PyPI/lief

Introduced in: 0Fixed in: 0.12.2

Fixpip install --upgrade 'lief>=0.12.2'

References

https://github.com/lief-project/LIEF/issues/781[REPORT]