Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
5.5
CVE-2022-38307: Adobe Acrobat Reader for macOS crashes due to segmentation error
CVE-2022-38307 · published 4 years ago
Summary
Adobe Acrobat Reader for macOS may crash if a malicious file is opened. This is a critical issue that could allow an attacker to disrupt workflow. Update to the latest version to ensure you have the latest security patches.
What to do
- Update romain thomas lief to version 0.12.1.
- Update lief-project lief to version 0.12.1 or later.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| pip | romain thomas | lief |
< 0.12.1 Fix: upgrade to 0.12.1
|
| – | lief-project | lief |
< 0.12.1 cpe:2.3:a:lief-project:lief:*:*:*:*:*:*:*:* |
Original advisory text
LIEF commit 5d1d643 was discovered to contain a segmentation violation via the function LIEF::MachO::SegmentCommand::file_offset() at /MachO/SegmentCommand.cpp.
LIEF commit 5d1d643 was discovered to contain a segmentation violation via the function LIEF::MachO::SegmentCommand::file_offset() at /MachO/SegmentCommand.cpp.
References
- https://nvd.nist.gov/vuln/detail/CVE-2022-38307 Vendor Advisory
- https://github.com/lief-project/LIEF/commit/7acf0bc4224081d4f425fcc8b2e361b95291...
- https://github.com/pypa/advisory-database/tree/main/vulns/lief/PYSEC-2022-275.ya...
- https://github.com/advisories/GHSA-x2xx-jw5m-5j86
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/38xxx/CVE-2022-38307... Vendor Advisory
- https://github.com/lief-project/LIEF/issues/764 Third Party Advisory
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker partial control (estimated)
Type
CWE-476NULL Pointer Dereference
Timeline
Published13 Sep 2022
Updated31 Oct 2026
First seen6 Mar 2026
Track software like this
Free during beta