High severityNVD Advisory· Published Nov 17, 2022· Updated Apr 29, 2025

CVE-2022-43171

Description

A heap buffer overflow in the LIEF::MachO::BinaryParser::parse_dyldinfo_generic_bind function of LIEF v0.12.1 allows attackers to cause a Denial of Service (DoS) via a crafted MachO file.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
liefPyPI	< 0.12.3	0.12.3

Affected products

LIEF/LIEFdescription
ghsa-coords
pkg:pypi/lief
Range: < 0.12.3

Patches

Vulnerability mechanics

References

github.com/advisories/GHSA-jvp9-phwp-p738ghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2022-43171ghsaADVISORY
github.com/lief-project/LIEF/issues/782ghsaWEB
github.com/pypa/advisory-database/tree/main/vulns/lief/PYSEC-2022-43140.yamlghsaWEB

News mentions

No linked articles in our index yet.

cvss	0.455
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000