Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-z6tk-ymuh-8be3
SummaryLIEF commit 365a16a was discovered to contain a heap-buffer overflow via the function print_binary at /c/macho_reader.c.
Aliases
0
alias CVE-2022-38495
1
alias GHSA-42vg-2q93-fj6j
2
alias PYSEC-2022-276
Fixed_packages
0
url pkg:pypi/lief@0.12.1
purl pkg:pypi/lief@0.12.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7ks5-ajmj-uqaw
1
vulnerability VCID-bgtn-xx89-1fdk
2
vulnerability VCID-c3m8-1et3-jyeu
3
vulnerability VCID-h8w4-72af-q3fp
4
vulnerability VCID-h9u8-1y87-nqde
5
vulnerability VCID-sx9k-k6gj-xycu
6
vulnerability VCID-ujch-knjs-wbc6
7
vulnerability VCID-yyzu-cawb-aqh4
8
vulnerability VCID-z6tk-ymuh-8be3
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/lief@0.12.1
Affected_packages
0
url pkg:conan/lief@0.12.1
purl pkg:conan/lief@0.12.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7ks5-ajmj-uqaw
1
vulnerability VCID-bgtn-xx89-1fdk
2
vulnerability VCID-h8w4-72af-q3fp
3
vulnerability VCID-h9u8-1y87-nqde
4
vulnerability VCID-yyzu-cawb-aqh4
5
vulnerability VCID-z6tk-ymuh-8be3
resource_url http://public2.vulnerablecode.io/packages/pkg:conan/lief@0.12.1
1
url pkg:pypi/lief@0
purl pkg:pypi/lief@0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-b25d-2z1r-53eb
1
vulnerability VCID-h9u8-1y87-nqde
2
vulnerability VCID-sx9k-k6gj-xycu
3
vulnerability VCID-z6tk-ymuh-8be3
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/lief@0
2
url pkg:pypi/lief@0.8.0
purl pkg:pypi/lief@0.8.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7ks5-ajmj-uqaw
1
vulnerability VCID-b25d-2z1r-53eb
2
vulnerability VCID-bgtn-xx89-1fdk
3
vulnerability VCID-c3m8-1et3-jyeu
4
vulnerability VCID-h8w4-72af-q3fp
5
vulnerability VCID-h9u8-1y87-nqde
6
vulnerability VCID-n137-244u-suab
7
vulnerability VCID-sx9k-k6gj-xycu
8
vulnerability VCID-ujch-knjs-wbc6
9
vulnerability VCID-yyzu-cawb-aqh4
10
vulnerability VCID-z6tk-ymuh-8be3
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/lief@0.8.0
3
url pkg:pypi/lief@0.8.1
purl pkg:pypi/lief@0.8.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7ks5-ajmj-uqaw
1
vulnerability VCID-b25d-2z1r-53eb
2
vulnerability VCID-bgtn-xx89-1fdk
3
vulnerability VCID-c3m8-1et3-jyeu
4
vulnerability VCID-h8w4-72af-q3fp
5
vulnerability VCID-h9u8-1y87-nqde
6
vulnerability VCID-n137-244u-suab
7
vulnerability VCID-sx9k-k6gj-xycu
8
vulnerability VCID-ujch-knjs-wbc6
9
vulnerability VCID-yyzu-cawb-aqh4
10
vulnerability VCID-z6tk-ymuh-8be3
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/lief@0.8.1
4
url pkg:pypi/lief@0.8.2
purl pkg:pypi/lief@0.8.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7ks5-ajmj-uqaw
1
vulnerability VCID-b25d-2z1r-53eb
2
vulnerability VCID-bgtn-xx89-1fdk
3
vulnerability VCID-c3m8-1et3-jyeu
4
vulnerability VCID-h8w4-72af-q3fp
5
vulnerability VCID-h9u8-1y87-nqde
6
vulnerability VCID-n137-244u-suab
7
vulnerability VCID-sx9k-k6gj-xycu
8
vulnerability VCID-ujch-knjs-wbc6
9
vulnerability VCID-yyzu-cawb-aqh4
10
vulnerability VCID-z6tk-ymuh-8be3
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/lief@0.8.2
5
url pkg:pypi/lief@0.8.3
purl pkg:pypi/lief@0.8.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7ks5-ajmj-uqaw
1
vulnerability VCID-b25d-2z1r-53eb
2
vulnerability VCID-bgtn-xx89-1fdk
3
vulnerability VCID-c3m8-1et3-jyeu
4
vulnerability VCID-h8w4-72af-q3fp
5
vulnerability VCID-h9u8-1y87-nqde
6
vulnerability VCID-n137-244u-suab
7
vulnerability VCID-sx9k-k6gj-xycu
8
vulnerability VCID-ujch-knjs-wbc6
9
vulnerability VCID-yyzu-cawb-aqh4
10
vulnerability VCID-z6tk-ymuh-8be3
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/lief@0.8.3
6
url pkg:pypi/lief@0.9.0
purl pkg:pypi/lief@0.9.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7ks5-ajmj-uqaw
1
vulnerability VCID-b25d-2z1r-53eb
2
vulnerability VCID-bgtn-xx89-1fdk
3
vulnerability VCID-c3m8-1et3-jyeu
4
vulnerability VCID-h8w4-72af-q3fp
5
vulnerability VCID-h9u8-1y87-nqde
6
vulnerability VCID-n137-244u-suab
7
vulnerability VCID-sx9k-k6gj-xycu
8
vulnerability VCID-ujch-knjs-wbc6
9
vulnerability VCID-yyzu-cawb-aqh4
10
vulnerability VCID-z6tk-ymuh-8be3
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/lief@0.9.0
7
url pkg:pypi/lief@0.10.0
purl pkg:pypi/lief@0.10.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7ks5-ajmj-uqaw
1
vulnerability VCID-b25d-2z1r-53eb
2
vulnerability VCID-bgtn-xx89-1fdk
3
vulnerability VCID-c3m8-1et3-jyeu
4
vulnerability VCID-h8w4-72af-q3fp
5
vulnerability VCID-h9u8-1y87-nqde
6
vulnerability VCID-n137-244u-suab
7
vulnerability VCID-sx9k-k6gj-xycu
8
vulnerability VCID-ujch-knjs-wbc6
9
vulnerability VCID-yyzu-cawb-aqh4
10
vulnerability VCID-z6tk-ymuh-8be3
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/lief@0.10.0
8
url pkg:pypi/lief@0.10.1
purl pkg:pypi/lief@0.10.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7ks5-ajmj-uqaw
1
vulnerability VCID-b25d-2z1r-53eb
2
vulnerability VCID-bgtn-xx89-1fdk
3
vulnerability VCID-c3m8-1et3-jyeu
4
vulnerability VCID-h8w4-72af-q3fp
5
vulnerability VCID-h9u8-1y87-nqde
6
vulnerability VCID-n137-244u-suab
7
vulnerability VCID-sx9k-k6gj-xycu
8
vulnerability VCID-ujch-knjs-wbc6
9
vulnerability VCID-yyzu-cawb-aqh4
10
vulnerability VCID-z6tk-ymuh-8be3
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/lief@0.10.1
9
url pkg:pypi/lief@0.11.0
purl pkg:pypi/lief@0.11.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7ks5-ajmj-uqaw
1
vulnerability VCID-b25d-2z1r-53eb
2
vulnerability VCID-bgtn-xx89-1fdk
3
vulnerability VCID-c3m8-1et3-jyeu
4
vulnerability VCID-h8w4-72af-q3fp
5
vulnerability VCID-h9u8-1y87-nqde
6
vulnerability VCID-n137-244u-suab
7
vulnerability VCID-sx9k-k6gj-xycu
8
vulnerability VCID-ujch-knjs-wbc6
9
vulnerability VCID-yyzu-cawb-aqh4
10
vulnerability VCID-z6tk-ymuh-8be3
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/lief@0.11.0
10
url pkg:pypi/lief@0.11.1
purl pkg:pypi/lief@0.11.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7ks5-ajmj-uqaw
1
vulnerability VCID-b25d-2z1r-53eb
2
vulnerability VCID-bgtn-xx89-1fdk
3
vulnerability VCID-c3m8-1et3-jyeu
4
vulnerability VCID-h8w4-72af-q3fp
5
vulnerability VCID-h9u8-1y87-nqde
6
vulnerability VCID-n137-244u-suab
7
vulnerability VCID-sx9k-k6gj-xycu
8
vulnerability VCID-ujch-knjs-wbc6
9
vulnerability VCID-yyzu-cawb-aqh4
10
vulnerability VCID-z6tk-ymuh-8be3
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/lief@0.11.1
11
url pkg:pypi/lief@0.11.2
purl pkg:pypi/lief@0.11.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7ks5-ajmj-uqaw
1
vulnerability VCID-b25d-2z1r-53eb
2
vulnerability VCID-bgtn-xx89-1fdk
3
vulnerability VCID-c3m8-1et3-jyeu
4
vulnerability VCID-h8w4-72af-q3fp
5
vulnerability VCID-h9u8-1y87-nqde
6
vulnerability VCID-n137-244u-suab
7
vulnerability VCID-sx9k-k6gj-xycu
8
vulnerability VCID-ujch-knjs-wbc6
9
vulnerability VCID-yyzu-cawb-aqh4
10
vulnerability VCID-z6tk-ymuh-8be3
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/lief@0.11.2
12
url pkg:pypi/lief@0.11.3
purl pkg:pypi/lief@0.11.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7ks5-ajmj-uqaw
1
vulnerability VCID-b25d-2z1r-53eb
2
vulnerability VCID-bgtn-xx89-1fdk
3
vulnerability VCID-c3m8-1et3-jyeu
4
vulnerability VCID-h8w4-72af-q3fp
5
vulnerability VCID-h9u8-1y87-nqde
6
vulnerability VCID-n137-244u-suab
7
vulnerability VCID-sx9k-k6gj-xycu
8
vulnerability VCID-ujch-knjs-wbc6
9
vulnerability VCID-yyzu-cawb-aqh4
10
vulnerability VCID-z6tk-ymuh-8be3
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/lief@0.11.3
13
url pkg:pypi/lief@0.11.4
purl pkg:pypi/lief@0.11.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7ks5-ajmj-uqaw
1
vulnerability VCID-b25d-2z1r-53eb
2
vulnerability VCID-bgtn-xx89-1fdk
3
vulnerability VCID-c3m8-1et3-jyeu
4
vulnerability VCID-h8w4-72af-q3fp
5
vulnerability VCID-h9u8-1y87-nqde
6
vulnerability VCID-n137-244u-suab
7
vulnerability VCID-sx9k-k6gj-xycu
8
vulnerability VCID-ujch-knjs-wbc6
9
vulnerability VCID-yyzu-cawb-aqh4
10
vulnerability VCID-z6tk-ymuh-8be3
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/lief@0.11.4
14
url pkg:pypi/lief@0.11.5
purl pkg:pypi/lief@0.11.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7ks5-ajmj-uqaw
1
vulnerability VCID-b25d-2z1r-53eb
2
vulnerability VCID-bgtn-xx89-1fdk
3
vulnerability VCID-c3m8-1et3-jyeu
4
vulnerability VCID-h8w4-72af-q3fp
5
vulnerability VCID-h9u8-1y87-nqde
6
vulnerability VCID-sx9k-k6gj-xycu
7
vulnerability VCID-ujch-knjs-wbc6
8
vulnerability VCID-yyzu-cawb-aqh4
9
vulnerability VCID-z6tk-ymuh-8be3
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/lief@0.11.5
15
url pkg:pypi/lief@0.12.0
purl pkg:pypi/lief@0.12.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7ks5-ajmj-uqaw
1
vulnerability VCID-b25d-2z1r-53eb
2
vulnerability VCID-bgtn-xx89-1fdk
3
vulnerability VCID-c3m8-1et3-jyeu
4
vulnerability VCID-h8w4-72af-q3fp
5
vulnerability VCID-h9u8-1y87-nqde
6
vulnerability VCID-sx9k-k6gj-xycu
7
vulnerability VCID-ujch-knjs-wbc6
8
vulnerability VCID-yyzu-cawb-aqh4
9
vulnerability VCID-z6tk-ymuh-8be3
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/lief@0.12.0
16
url pkg:pypi/lief@0.12.1
purl pkg:pypi/lief@0.12.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7ks5-ajmj-uqaw
1
vulnerability VCID-bgtn-xx89-1fdk
2
vulnerability VCID-c3m8-1et3-jyeu
3
vulnerability VCID-h8w4-72af-q3fp
4
vulnerability VCID-h9u8-1y87-nqde
5
vulnerability VCID-sx9k-k6gj-xycu
6
vulnerability VCID-ujch-knjs-wbc6
7
vulnerability VCID-yyzu-cawb-aqh4
8
vulnerability VCID-z6tk-ymuh-8be3
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/lief@0.12.1
References
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-38495
reference_id
reference_type
scores
0
value 0.00054
scoring_system epss
scoring_elements 0.17395
published_at 2026-06-05T12:55:00Z
1
value 0.00054
scoring_system epss
scoring_elements 0.17317
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-38495
1
reference_url https://github.com/lief-project/LIEF
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/lief-project/LIEF
2
reference_url https://github.com/lief-project/LIEF/commit/0033b6312fd311b2e45e379c04a83d77c1e58578
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/lief-project/LIEF/commit/0033b6312fd311b2e45e379c04a83d77c1e58578
3
reference_url https://github.com/lief-project/LIEF/issues/767
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/lief-project/LIEF/issues/767
4
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/lief/PYSEC-2022-276.yaml
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/lief/PYSEC-2022-276.yaml
5
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-38495
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2022-38495
6
reference_url https://github.com/advisories/GHSA-42vg-2q93-fj6j
reference_id GHSA-42vg-2q93-fj6j
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-42vg-2q93-fj6j
Weaknesses
0
cwe_id 787
name Out-of-bounds Write
description The product writes data past the end, or before the beginning, of the intended buffer.
1
cwe_id 1035
name OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017.
2
cwe_id 937
name OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013.
Exploits
Severity_range_score7.0 - 8.9
Exploitability0.5
Weighted_severity8.0
Risk_score4.0
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-z6tk-ymuh-8be3