PYSEC-2021-324

See a problem?

Import Source

https://github.com/pypa/advisory-database/blob/main/vulns/lief/PYSEC-2021-324.yaml

JSON Data

https://api.test.osv.dev/v1/vulns/PYSEC-2021-324

Aliases

CVE-2021-32297
GHSA-22x7-vwh9-5w4g

Published

2021-09-20T16:15:00Z

Modified

2024-02-01T21:56:34.390872Z

Summary

[none]

Details

An issue was discovered in LIEF through 0.11.4. A heap-buffer-overflow exists in the function main located in pe_reader.c. It allows an attacker to cause code Execution.

References

https://github.com/lief-project/LIEF/issues/449

Affected packages

PyPI / lief

Package

Name: lief; View open source insights on deps.dev
Purl: pkg:pypi/lief

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0.11.5

Affected versions

0.*

0.8.0

0.8.1

0.8.2

0.8.3

0.9.0

0.10.0

0.10.1

0.11.0

0.11.1

0.11.2

0.11.3

0.11.4

Database specific

source

"https://github.com/pypa/advisory-database/blob/main/vulns/lief/PYSEC-2021-324.yaml"