CVE-2024-31636
An issue in LIEF v.0.14.1 allows a local attacker to obtain sensitive information via the name parameter of the machd_reader.c component.
PatchFirst · Latest vulnerabilities
Vulnerabilities published for lief in the last 30 days: 0. Listed in the KEV catalogue: 0.
Vulnerabilities: 7
An issue in LIEF v.0.14.1 allows a local attacker to obtain sensitive information via the name parameter of the machd_reader.c component.
LIEF commit 365a16a was discovered to contain a segmentation violation via the component CoreFile.tcc:69.
LIEF commit 365a16a was discovered to contain a reachable assertion abort via the component BinaryStream.hpp.
LIEF commit 365a16a was discovered to contain a heap-buffer overflow via the function print_binary at /c/macho_reader.c.
LIEF commit 5d1d643 was discovered to contain a segmentation violation via the function LIEF::MachO::SegmentCommand::file_offset() at /MachO/SegmentCommand.cpp.
LIEF commit 5d1d643 was discovered to contain a heap-buffer overflow in the component /core/CorePrPsInfo.tcc.
An issue was discovered in LIEF through 0.11.4. A heap-buffer-overflow exists in the function main located in pe_reader.c. It allows an attacker to cause code Execution.
Check your installed stack and versions against the current vulnerability feeds.