CVE-2022-40923: Lief-Project Lief

Medium severity, CVSS 6.5. EPSS: 0.8% chance of exploitation in the next 30 days.

A vulnerability in the LIEF::MachO::SegmentCommand::virtual_address function of LIEF v0.12.1 allows attackers to cause a denial of service (DOS) through a segmentation fault via a crafted MachO file.

Affected products

• Lief-Project Lief: version 0.12.1 only

Published 2022-09-30. Last modified 2026-06-17.