PYSEC-2024-280

See a problem?

Import Source

https://github.com/pypa/advisory-database/blob/main/vulns/lief/PYSEC-2024-280.yaml

JSON Data

https://api.test.osv.dev/v1/vulns/PYSEC-2024-280

Aliases

Published

2024-05-03T17:15:07.687Z

Modified

2026-05-21T15:00:13.900686556Z

Severity

3.9 (Low) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N CVSS Calculator

Summary

[none]

Details

An issue in LIEF v.0.14.1 allows a local attacker to obtain sensitive information via the name parameter of the machd_reader.c component.

References

Affected packages

PyPI / lief

Package

Name: lief; View open source insights on deps.dev
Purl: pkg:pypi/lief

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Last affected

0.14.1

Affected versions

0.*

0.8.0

0.8.1

0.8.2

0.8.3

0.9.0

0.10.0

0.10.1

0.11.0

0.11.1

0.11.2

0.11.3

0.11.4

0.11.5

0.12.0

0.12.1

0.12.2

0.12.3

0.13.0

0.13.1

0.13.2

0.14.0

0.14.1

Database specific

source

"https://github.com/pypa/advisory-database/blob/main/vulns/lief/PYSEC-2024-280.yaml"