id: PYSEC-2022-43137
modified: 2024-11-21T14:22:53.842904Z
published: 2022-09-13T21:15:00Z
aliases:
- CVE-2022-38496
details: LIEF commit 365a16a was discovered to contain a reachable assertion abort
  via the component BinaryStream.hpp.
affected:
- package:
    ecosystem: PyPI
    name: lief
    purl: pkg:pypi/lief
  ranges:
  - type: ECOSYSTEM
    events:
    - introduced: "0"
    - fixed: 0.12.2
  versions:
  - 0.10.0
  - 0.10.1
  - 0.11.0
  - 0.11.1
  - 0.11.2
  - 0.11.3
  - 0.11.4
  - 0.11.5
  - 0.12.0
  - 0.12.1
  - 0.8.0
  - 0.8.1
  - 0.8.2
  - 0.8.3
  - 0.9.0
severity:
- type: CVSS_V3
  score: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
references:
- type: EVIDENCE
  url: https://github.com/lief-project/LIEF/issues/765
- type: REPORT
  url: https://github.com/lief-project/LIEF/issues/765
- type: FIX
  url: https://github.com/lief-project/LIEF/issues/765