CVE-2022-38497

Description

LIEF commit 365a16a was discovered to contain a segmentation violation via the component CoreFile.tcc:69.

How to fix CVE-2022-38497

To remediate CVE-2022-38497, upgrade the affected package to a fixed version below.

• PyPI/lief—no fix listed
• PyPI/lief—upgrade to 0.12.1 or later

Is CVE-2022-38497 being exploited?

Low — EPSS is 0.0%, meaning exploitation activity has not been observed at scale.

Affected packages (2)

• from 0, <= 0.12.1
• from 0, < 0.12.1

CVSS scores

References (6)

• ADVISORYgithub.com/advisories/GHSA-2p5h-hpj4-fxgg
• ADVISORYnvd.nist.gov/vuln/detail/CVE-2022-38497
• PATCHgithub.com/lief-project/LIEF
• WEBgithub.com/lief-project/LIEF/commit/ca938740264f1fcb18f91cba8e4039c518ecb75b
• WEB