lief-project records

11 published records for vendor lief-project.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 0
With a fix record: 90.9%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

11 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
35Monitor	CVE-2021-32297No exploit	An issue was discovered in LIEF through 0.11.4.lief-project · lief · CWE-787 Pre-auth Memory safety	High8.8	—	1.5%	Sep 20, 2021
31Monitor	CVE-2022-38306No exploit	LIEF commit 5d1d643 was discovered to contain a heap-buffer overflow in the component /core/CorePrPsInfo.tcc.lief-project · lief · CWE-787 Memory safety	High7.8	—	0.3%	Sep 13, 2022
31Monitor	CVE-2022-38495No exploit	LIEF commit 365a16a was discovered to contain a heap-buffer overflow via the function print_binary at /c/macho_reader.c.lief-project · lief · CWE-787 Memory safety	High7.8	—	0.3%	Sep 13, 2022
26Monitor	CVE-2022-40923No exploit	A vulnerability in the LIEF::MachO::SegmentCommand::virtual_address function of LIEF v0.12.1 allows attackers to cause a denial of service (lief-project · lief · CWE-20 Pre-auth Denial of service	Medium6.5	—	0.7%	Sep 30, 2022
26Monitor	CVE-2022-43171No exploit	A heap buffer overflow in the LIEF::MachO::BinaryParser::parse_dyldinfo_generic_bind function of LIEF v0.12.1 allows attackers to cause a Delief-project · lief · CWE-787 Pre-auth Memory safety Denial of service	Medium6.5	—	0.7%	Nov 17, 2022
26Monitor	CVE-2022-40922No exploit	A vulnerability in the LIEF::MachO::BinaryParser::init_and_parse function of LIEF v0.12.1 allows attackers to cause a denial of service (DOSlief-project · lief Pre-auth Denial of service	Medium6.5	—	0.6%	Oct 3, 2022
22Monitor	CVE-2022-38307No exploit	LIEF commit 5d1d643 was discovered to contain a segmentation violation via the function LIEF::MachO::SegmentCommand::file_offset() at /MachOlief-project · lief · CWE-476 Memory safety Denial of service	Medium5.5	—	0.3%	Sep 13, 2022
22Monitor	CVE-2022-38497No exploit	LIEF commit 365a16a was discovered to contain a segmentation violation via the component CoreFile.tcc:69.lief-project · lief · CWE-476 Memory safety Denial of service	Medium5.5	—	0.3%	Sep 13, 2022
22Monitor	CVE-2022-38496No exploit	LIEF commit 365a16a was discovered to contain a reachable assertion abort via the component BinaryStream.hpp.lief-project · lief · CWE-617 Denial of service	Medium5.5	—	0.3%	Sep 13, 2022
15Monitor	CVE-2024-31636No exploit	An issue in LIEF v.0.14.1 allows a local attacker to obtain sensitive information via the name parameter of the machd_reader.c component.lief-project · lief · CWE-457	Low3.9	—	0.2%	May 3, 2024
7Monitor	CVE-2025-15504No exploit	lief-project LIEF ELF Binary Parser.tcc parse_binary null pointer dereferencelief-project · lief · CWE-404	Low1.9	—	0.2%	Jan 10, 2026

CVE-2021-32297
35Monitor
An issue was discovered in LIEF through 0.11.4.
HighCVSS 8.8No exploitEPSS 1%
- Pre-auth
- Memory safety
lief-project · liefSep 20, 2021
CVE-2022-38306
31Monitor
LIEF commit 5d1d643 was discovered to contain a heap-buffer overflow in the component /core/CorePrPsInfo.tcc.
HighCVSS 7.8No exploitEPSS 0%
- Memory safety
lief-project · liefSep 13, 2022
CVE-2022-38495
31Monitor
LIEF commit 365a16a was discovered to contain a heap-buffer overflow via the function print_binary at /c/macho_reader.c.
HighCVSS 7.8No exploitEPSS 0%
- Memory safety
lief-project · liefSep 13, 2022
CVE-2022-40923
26Monitor
A vulnerability in the LIEF::MachO::SegmentCommand::virtual_address function of LIEF v0.12.1 allows attackers to cause a denial of service (
MediumCVSS 6.5No exploitEPSS 0%
- Pre-auth
- Denial of service
lief-project · liefSep 30, 2022
CVE-2022-43171
26Monitor
A heap buffer overflow in the LIEF::MachO::BinaryParser::parse_dyldinfo_generic_bind function of LIEF v0.12.1 allows attackers to cause a De
MediumCVSS 6.5No exploitEPSS 0%
lief-project · liefNov 17, 2022
CVE-2022-40922
26Monitor
A vulnerability in the LIEF::MachO::BinaryParser::init_and_parse function of LIEF v0.12.1 allows attackers to cause a denial of service (DOS
MediumCVSS 6.5No exploitEPSS 0%
- Pre-auth
- Denial of service
lief-project · liefOct 3, 2022
CVE-2022-38307
22Monitor
LIEF commit 5d1d643 was discovered to contain a segmentation violation via the function LIEF::MachO::SegmentCommand::file_offset() at /MachO
MediumCVSS 5.5No exploitEPSS 0%
- Memory safety
- Denial of service
lief-project · liefSep 13, 2022
CVE-2022-38497
22Monitor
LIEF commit 365a16a was discovered to contain a segmentation violation via the component CoreFile.tcc:69.
MediumCVSS 5.5No exploitEPSS 0%
- Memory safety
- Denial of service
lief-project · liefSep 13, 2022
CVE-2022-38496
22Monitor
LIEF commit 365a16a was discovered to contain a reachable assertion abort via the component BinaryStream.hpp.
MediumCVSS 5.5No exploitEPSS 0%
- Denial of service
lief-project · liefSep 13, 2022
CVE-2024-31636
15Monitor
An issue in LIEF v.0.14.1 allows a local attacker to obtain sensitive information via the name parameter of the machd_reader.c component.
LowCVSS 3.9No exploitEPSS 0%
lief-project · liefMay 3, 2024
CVE-2025-15504
7Monitor
lief-project LIEF ELF Binary Parser.tcc parse_binary null pointer dereference
LowCVSS 1.9No exploitEPSS 0%
lief-project · liefJan 10, 2026