Safety CI > MobSF/Mobile-Security-Framework-MobSF

jar_aar

2 years, 5 months ago

9a448dfc

update jquery to 3.5.0

lief 0.13.0 has known security vulnerabilities.

Package	Installed	Affected	Info
lief	0.13.0	<0.15.0	show Affected versions of the lief package are vulnerable to Information Disclosure due to the use of an uninitialized variable in the machd_reader.c component’s name parameter. The machd_reader.c component accepts the name parameter without proper initialization, allowing leakage of potentially sensitive memory contents. A local attacker can exploit this by invoking the machd_reader functionality with a crafted name parameter, causing the LIEF package to disclose unintended information from process memory.

Package

Installed

Affected

Info

lief

0.13.0

<0.15.0

show

Affected versions of the lief package are vulnerable to Information Disclosure due to the use of an uninitialized variable in the machd_reader.c component’s name parameter. The machd_reader.c component accepts the name parameter without proper initialization, allowing leakage of potentially sensitive memory contents. A local attacker can exploit this by invoking the machd_reader functionality with a crafted name parameter, causing the LIEF package to disclose unintended information from process memory.

jar_aar

2 years, 5 months ago

5749d29f

f string

lief 0.13.0 has known security vulnerabilities.

Package	Installed	Affected	Info
lief	0.13.0	<0.15.0	show Affected versions of the lief package are vulnerable to Information Disclosure due to the use of an uninitialized variable in the machd_reader.c component’s name parameter. The machd_reader.c component accepts the name parameter without proper initialization, allowing leakage of potentially sensitive memory contents. A local attacker can exploit this by invoking the machd_reader functionality with a crafted name parameter, causing the LIEF package to disclose unintended information from process memory.

Package

Installed

Affected

Info

lief

0.13.0

<0.15.0

show

Affected versions of the lief package are vulnerable to Information Disclosure due to the use of an uninitialized variable in the machd_reader.c component’s name parameter. The machd_reader.c component accepts the name parameter without proper initialization, allowing leakage of potentially sensitive memory contents. A local attacker can exploit this by invoking the machd_reader functionality with a crafted name parameter, causing the LIEF package to disclose unintended information from process memory.

jar_aar

2 years, 5 months ago

ae629362

AAR and JAR support

lief 0.13.0 has known security vulnerabilities.

Package	Installed	Affected	Info
lief	0.13.0	<0.15.0	show Affected versions of the lief package are vulnerable to Information Disclosure due to the use of an uninitialized variable in the machd_reader.c component’s name parameter. The machd_reader.c component accepts the name parameter without proper initialization, allowing leakage of potentially sensitive memory contents. A local attacker can exploit this by invoking the machd_reader functionality with a crafted name parameter, causing the LIEF package to disclose unintended information from process memory.

Package

Installed

Affected

Info

lief

0.13.0

<0.15.0

show

Affected versions of the lief package are vulnerable to Information Disclosure due to the use of an uninitialized variable in the machd_reader.c component’s name parameter. The machd_reader.c component accepts the name parameter without proper initialization, allowing leakage of potentially sensitive memory contents. A local attacker can exploit this by invoking the machd_reader functionality with a crafted name parameter, causing the LIEF package to disclose unintended information from process memory.

master

2 years, 5 months ago

0cd255cb

[Enterprise Feature Request EFR02] Support summary of severity in each section. (#2160) * Summary f

lief 0.12.3 has known security vulnerabilities.

Package	Installed	Affected	Info
lief	0.12.3	<0.15.0	show Affected versions of the lief package are vulnerable to Information Disclosure due to the use of an uninitialized variable in the machd_reader.c component’s name parameter. The machd_reader.c component accepts the name parameter without proper initialization, allowing leakage of potentially sensitive memory contents. A local attacker can exploit this by invoking the machd_reader functionality with a crafted name parameter, causing the LIEF package to disclose unintended information from process memory.
lief	0.12.3	<0.13.0	show LIEF 0.13.0 fixes a reachable assertion abort via the component BinaryStream.hpp. https://github.com/lief-project/LIEF/issues/765 https://github.com/lief-project/LIEF/commit/175c3fde3fe1e3e011d72cf0562a52034eaac43c

Package

Installed

Affected

Info

lief

0.12.3

<0.15.0

show

Affected versions of the lief package are vulnerable to Information Disclosure due to the use of an uninitialized variable in the machd_reader.c component’s name parameter. The machd_reader.c component accepts the name parameter without proper initialization, allowing leakage of potentially sensitive memory contents. A local attacker can exploit this by invoking the machd_reader functionality with a crafted name parameter, causing the LIEF package to disclose unintended information from process memory.

lief

0.12.3

<0.13.0

show

LIEF 0.13.0 fixes a reachable assertion abort via the component BinaryStream.hpp.
https://github.com/lief-project/LIEF/issues/765
https://github.com/lief-project/LIEF/commit/175c3fde3fe1e3e011d72cf0562a52034eaac43c

EFR02

2 years, 5 months ago

a91031d3

Move summary to top of each section

lief 0.12.3 has known security vulnerabilities.

Package	Installed	Affected	Info
lief	0.12.3	<0.15.0	show Affected versions of the lief package are vulnerable to Information Disclosure due to the use of an uninitialized variable in the machd_reader.c component’s name parameter. The machd_reader.c component accepts the name parameter without proper initialization, allowing leakage of potentially sensitive memory contents. A local attacker can exploit this by invoking the machd_reader functionality with a crafted name parameter, causing the LIEF package to disclose unintended information from process memory.
lief	0.12.3	<0.13.0	show LIEF 0.13.0 fixes a reachable assertion abort via the component BinaryStream.hpp. https://github.com/lief-project/LIEF/issues/765 https://github.com/lief-project/LIEF/commit/175c3fde3fe1e3e011d72cf0562a52034eaac43c

Package

Installed

Affected

Info

lief

0.12.3

<0.15.0

show

Affected versions of the lief package are vulnerable to Information Disclosure due to the use of an uninitialized variable in the machd_reader.c component’s name parameter. The machd_reader.c component accepts the name parameter without proper initialization, allowing leakage of potentially sensitive memory contents. A local attacker can exploit this by invoking the machd_reader functionality with a crafted name parameter, causing the LIEF package to disclose unintended information from process memory.

lief

0.12.3

<0.13.0

show

LIEF 0.13.0 fixes a reachable assertion abort via the component BinaryStream.hpp.
https://github.com/lief-project/LIEF/issues/765
https://github.com/lief-project/LIEF/commit/175c3fde3fe1e3e011d72cf0562a52034eaac43c

pyup-scheduled-update-2023-04-10

2 years, 5 months ago

2274a41d

Update quark-engine from 22.10.1 to 23.3.1

lief 0.12.3 has known security vulnerabilities.

Package	Installed	Affected	Info
lief	0.12.3	<0.15.0	show Affected versions of the lief package are vulnerable to Information Disclosure due to the use of an uninitialized variable in the machd_reader.c component’s name parameter. The machd_reader.c component accepts the name parameter without proper initialization, allowing leakage of potentially sensitive memory contents. A local attacker can exploit this by invoking the machd_reader functionality with a crafted name parameter, causing the LIEF package to disclose unintended information from process memory.
lief	0.12.3	<0.13.0	show LIEF 0.13.0 fixes a reachable assertion abort via the component BinaryStream.hpp. https://github.com/lief-project/LIEF/issues/765 https://github.com/lief-project/LIEF/commit/175c3fde3fe1e3e011d72cf0562a52034eaac43c

Package

Installed

Affected

Info

lief

0.12.3

<0.15.0

show

Affected versions of the lief package are vulnerable to Information Disclosure due to the use of an uninitialized variable in the machd_reader.c component’s name parameter. The machd_reader.c component accepts the name parameter without proper initialization, allowing leakage of potentially sensitive memory contents. A local attacker can exploit this by invoking the machd_reader functionality with a crafted name parameter, causing the LIEF package to disclose unintended information from process memory.

lief

0.12.3

<0.13.0

show

LIEF 0.13.0 fixes a reachable assertion abort via the component BinaryStream.hpp.
https://github.com/lief-project/LIEF/issues/765
https://github.com/lief-project/LIEF/commit/175c3fde3fe1e3e011d72cf0562a52034eaac43c

pyup-scheduled-update-2023-04-10

2 years, 5 months ago

cfa34574

Update frida from 15.2.2 to 16.0.11

lief 0.12.3 has known security vulnerabilities.

Package	Installed	Affected	Info
lief	0.12.3	<0.15.0	show Affected versions of the lief package are vulnerable to Information Disclosure due to the use of an uninitialized variable in the machd_reader.c component’s name parameter. The machd_reader.c component accepts the name parameter without proper initialization, allowing leakage of potentially sensitive memory contents. A local attacker can exploit this by invoking the machd_reader functionality with a crafted name parameter, causing the LIEF package to disclose unintended information from process memory.
lief	0.12.3	<0.13.0	show LIEF 0.13.0 fixes a reachable assertion abort via the component BinaryStream.hpp. https://github.com/lief-project/LIEF/issues/765 https://github.com/lief-project/LIEF/commit/175c3fde3fe1e3e011d72cf0562a52034eaac43c

Package

Installed

Affected

Info

lief

0.12.3

<0.15.0

show

Affected versions of the lief package are vulnerable to Information Disclosure due to the use of an uninitialized variable in the machd_reader.c component’s name parameter. The machd_reader.c component accepts the name parameter without proper initialization, allowing leakage of potentially sensitive memory contents. A local attacker can exploit this by invoking the machd_reader functionality with a crafted name parameter, causing the LIEF package to disclose unintended information from process memory.

lief

0.12.3

<0.13.0

show

LIEF 0.13.0 fixes a reachable assertion abort via the component BinaryStream.hpp.
https://github.com/lief-project/LIEF/issues/765
https://github.com/lief-project/LIEF/commit/175c3fde3fe1e3e011d72cf0562a52034eaac43c

EFR02

2 years, 5 months ago

d9f5881e

version bump

lief 0.12.3 has known security vulnerabilities.

Package	Installed	Affected	Info
lief	0.12.3	<0.15.0	show Affected versions of the lief package are vulnerable to Information Disclosure due to the use of an uninitialized variable in the machd_reader.c component’s name parameter. The machd_reader.c component accepts the name parameter without proper initialization, allowing leakage of potentially sensitive memory contents. A local attacker can exploit this by invoking the machd_reader functionality with a crafted name parameter, causing the LIEF package to disclose unintended information from process memory.
lief	0.12.3	<0.13.0	show LIEF 0.13.0 fixes a reachable assertion abort via the component BinaryStream.hpp. https://github.com/lief-project/LIEF/issues/765 https://github.com/lief-project/LIEF/commit/175c3fde3fe1e3e011d72cf0562a52034eaac43c

Package

Installed

Affected

Info

lief

0.12.3

<0.15.0

show

Affected versions of the lief package are vulnerable to Information Disclosure due to the use of an uninitialized variable in the machd_reader.c component’s name parameter. The machd_reader.c component accepts the name parameter without proper initialization, allowing leakage of potentially sensitive memory contents. A local attacker can exploit this by invoking the machd_reader functionality with a crafted name parameter, causing the LIEF package to disclose unintended information from process memory.

lief

0.12.3

<0.13.0

show

LIEF 0.13.0 fixes a reachable assertion abort via the component BinaryStream.hpp.
https://github.com/lief-project/LIEF/issues/765
https://github.com/lief-project/LIEF/commit/175c3fde3fe1e3e011d72cf0562a52034eaac43c

EFR02

2 years, 5 months ago

3800addd

Code QA

lief 0.12.3 has known security vulnerabilities.

Package	Installed	Affected	Info
lief	0.12.3	<0.15.0	show Affected versions of the lief package are vulnerable to Information Disclosure due to the use of an uninitialized variable in the machd_reader.c component’s name parameter. The machd_reader.c component accepts the name parameter without proper initialization, allowing leakage of potentially sensitive memory contents. A local attacker can exploit this by invoking the machd_reader functionality with a crafted name parameter, causing the LIEF package to disclose unintended information from process memory.
lief	0.12.3	<0.13.0	show LIEF 0.13.0 fixes a reachable assertion abort via the component BinaryStream.hpp. https://github.com/lief-project/LIEF/issues/765 https://github.com/lief-project/LIEF/commit/175c3fde3fe1e3e011d72cf0562a52034eaac43c

Package

Installed

Affected

Info

lief

0.12.3

<0.15.0

show

Affected versions of the lief package are vulnerable to Information Disclosure due to the use of an uninitialized variable in the machd_reader.c component’s name parameter. The machd_reader.c component accepts the name parameter without proper initialization, allowing leakage of potentially sensitive memory contents. A local attacker can exploit this by invoking the machd_reader functionality with a crafted name parameter, causing the LIEF package to disclose unintended information from process memory.

lief

0.12.3

<0.13.0

show

LIEF 0.13.0 fixes a reachable assertion abort via the component BinaryStream.hpp.
https://github.com/lief-project/LIEF/issues/765
https://github.com/lief-project/LIEF/commit/175c3fde3fe1e3e011d72cf0562a52034eaac43c

EFR02

2 years, 5 months ago

e9ab9b1a

Code QA

lief 0.12.3 has known security vulnerabilities.

Package	Installed	Affected	Info
lief	0.12.3	<0.15.0	show Affected versions of the lief package are vulnerable to Information Disclosure due to the use of an uninitialized variable in the machd_reader.c component’s name parameter. The machd_reader.c component accepts the name parameter without proper initialization, allowing leakage of potentially sensitive memory contents. A local attacker can exploit this by invoking the machd_reader functionality with a crafted name parameter, causing the LIEF package to disclose unintended information from process memory.
lief	0.12.3	<0.13.0	show LIEF 0.13.0 fixes a reachable assertion abort via the component BinaryStream.hpp. https://github.com/lief-project/LIEF/issues/765 https://github.com/lief-project/LIEF/commit/175c3fde3fe1e3e011d72cf0562a52034eaac43c

Package

Installed

Affected

Info

lief

0.12.3

<0.15.0

show

Affected versions of the lief package are vulnerable to Information Disclosure due to the use of an uninitialized variable in the machd_reader.c component’s name parameter. The machd_reader.c component accepts the name parameter without proper initialization, allowing leakage of potentially sensitive memory contents. A local attacker can exploit this by invoking the machd_reader functionality with a crafted name parameter, causing the LIEF package to disclose unintended information from process memory.

lief

0.12.3

<0.13.0

show

LIEF 0.13.0 fixes a reachable assertion abort via the component BinaryStream.hpp.
https://github.com/lief-project/LIEF/issues/765
https://github.com/lief-project/LIEF/commit/175c3fde3fe1e3e011d72cf0562a52034eaac43c

EFR02

2 years, 5 months ago

419fe7b8

Summary for Android and iOS SCA

lief 0.12.3 has known security vulnerabilities.

Package	Installed	Affected	Info
lief	0.12.3	<0.15.0	show Affected versions of the lief package are vulnerable to Information Disclosure due to the use of an uninitialized variable in the machd_reader.c component’s name parameter. The machd_reader.c component accepts the name parameter without proper initialization, allowing leakage of potentially sensitive memory contents. A local attacker can exploit this by invoking the machd_reader functionality with a crafted name parameter, causing the LIEF package to disclose unintended information from process memory.
lief	0.12.3	<0.13.0	show LIEF 0.13.0 fixes a reachable assertion abort via the component BinaryStream.hpp. https://github.com/lief-project/LIEF/issues/765 https://github.com/lief-project/LIEF/commit/175c3fde3fe1e3e011d72cf0562a52034eaac43c

Package

Installed

Affected

Info

lief

0.12.3

<0.15.0

show

Affected versions of the lief package are vulnerable to Information Disclosure due to the use of an uninitialized variable in the machd_reader.c component’s name parameter. The machd_reader.c component accepts the name parameter without proper initialization, allowing leakage of potentially sensitive memory contents. A local attacker can exploit this by invoking the machd_reader functionality with a crafted name parameter, causing the LIEF package to disclose unintended information from process memory.

lief

0.12.3

<0.13.0

show

LIEF 0.13.0 fixes a reachable assertion abort via the component BinaryStream.hpp.
https://github.com/lief-project/LIEF/issues/765
https://github.com/lief-project/LIEF/commit/175c3fde3fe1e3e011d72cf0562a52034eaac43c

master

2 years, 5 months ago

a13bf58c

HOTFIX: Android min SDK check on janus vulnerability detection (#2159) * Android min SDK check on

lief 0.12.3 has known security vulnerabilities.

Package	Installed	Affected	Info
lief	0.12.3	<0.15.0	show Affected versions of the lief package are vulnerable to Information Disclosure due to the use of an uninitialized variable in the machd_reader.c component’s name parameter. The machd_reader.c component accepts the name parameter without proper initialization, allowing leakage of potentially sensitive memory contents. A local attacker can exploit this by invoking the machd_reader functionality with a crafted name parameter, causing the LIEF package to disclose unintended information from process memory.
lief	0.12.3	<0.13.0	show LIEF 0.13.0 fixes a reachable assertion abort via the component BinaryStream.hpp. https://github.com/lief-project/LIEF/issues/765 https://github.com/lief-project/LIEF/commit/175c3fde3fe1e3e011d72cf0562a52034eaac43c

Package

Installed

Affected

Info

lief

0.12.3

<0.15.0

show

Affected versions of the lief package are vulnerable to Information Disclosure due to the use of an uninitialized variable in the machd_reader.c component’s name parameter. The machd_reader.c component accepts the name parameter without proper initialization, allowing leakage of potentially sensitive memory contents. A local attacker can exploit this by invoking the machd_reader functionality with a crafted name parameter, causing the LIEF package to disclose unintended information from process memory.

lief

0.12.3

<0.13.0

show

LIEF 0.13.0 fixes a reachable assertion abort via the component BinaryStream.hpp.
https://github.com/lief-project/LIEF/issues/765
https://github.com/lief-project/LIEF/commit/175c3fde3fe1e3e011d72cf0562a52034eaac43c

pipfile

2 years, 5 months ago

1bc37873

Update README.md

lief 0.12.3 has known security vulnerabilities.

Package	Installed	Affected	Info
lief	0.12.3	<0.15.0	show Affected versions of the lief package are vulnerable to Information Disclosure due to the use of an uninitialized variable in the machd_reader.c component’s name parameter. The machd_reader.c component accepts the name parameter without proper initialization, allowing leakage of potentially sensitive memory contents. A local attacker can exploit this by invoking the machd_reader functionality with a crafted name parameter, causing the LIEF package to disclose unintended information from process memory.
lief	0.12.3	<0.13.0	show LIEF 0.13.0 fixes a reachable assertion abort via the component BinaryStream.hpp. https://github.com/lief-project/LIEF/issues/765 https://github.com/lief-project/LIEF/commit/175c3fde3fe1e3e011d72cf0562a52034eaac43c

Package

Installed

Affected

Info

lief

0.12.3

<0.15.0

show

Affected versions of the lief package are vulnerable to Information Disclosure due to the use of an uninitialized variable in the machd_reader.c component’s name parameter. The machd_reader.c component accepts the name parameter without proper initialization, allowing leakage of potentially sensitive memory contents. A local attacker can exploit this by invoking the machd_reader functionality with a crafted name parameter, causing the LIEF package to disclose unintended information from process memory.

lief

0.12.3

<0.13.0

show

LIEF 0.13.0 fixes a reachable assertion abort via the component BinaryStream.hpp.
https://github.com/lief-project/LIEF/issues/765
https://github.com/lief-project/LIEF/commit/175c3fde3fe1e3e011d72cf0562a52034eaac43c

pipfile

2 years, 5 months ago

44c67949

Android min SDK check on janus check

lief 0.12.3 has known security vulnerabilities.

Package	Installed	Affected	Info
lief	0.12.3	<0.15.0	show Affected versions of the lief package are vulnerable to Information Disclosure due to the use of an uninitialized variable in the machd_reader.c component’s name parameter. The machd_reader.c component accepts the name parameter without proper initialization, allowing leakage of potentially sensitive memory contents. A local attacker can exploit this by invoking the machd_reader functionality with a crafted name parameter, causing the LIEF package to disclose unintended information from process memory.
lief	0.12.3	<0.13.0	show LIEF 0.13.0 fixes a reachable assertion abort via the component BinaryStream.hpp. https://github.com/lief-project/LIEF/issues/765 https://github.com/lief-project/LIEF/commit/175c3fde3fe1e3e011d72cf0562a52034eaac43c

Package

Installed

Affected

Info

lief

0.12.3

<0.15.0

show

Affected versions of the lief package are vulnerable to Information Disclosure due to the use of an uninitialized variable in the machd_reader.c component’s name parameter. The machd_reader.c component accepts the name parameter without proper initialization, allowing leakage of potentially sensitive memory contents. A local attacker can exploit this by invoking the machd_reader functionality with a crafted name parameter, causing the LIEF package to disclose unintended information from process memory.

lief

0.12.3

<0.13.0

show

LIEF 0.13.0 fixes a reachable assertion abort via the component BinaryStream.hpp.
https://github.com/lief-project/LIEF/issues/765
https://github.com/lief-project/LIEF/commit/175c3fde3fe1e3e011d72cf0562a52034eaac43c

pyup-scheduled-update-2023-04-03

2 years, 5 months ago

e1acd3d4

Update quark-engine from 22.10.1 to 23.3.1

lief 0.12.3 has known security vulnerabilities.

Package	Installed	Affected	Info
lief	0.12.3	<0.15.0	show Affected versions of the lief package are vulnerable to Information Disclosure due to the use of an uninitialized variable in the machd_reader.c component’s name parameter. The machd_reader.c component accepts the name parameter without proper initialization, allowing leakage of potentially sensitive memory contents. A local attacker can exploit this by invoking the machd_reader functionality with a crafted name parameter, causing the LIEF package to disclose unintended information from process memory.
lief	0.12.3	<0.13.0	show LIEF 0.13.0 fixes a reachable assertion abort via the component BinaryStream.hpp. https://github.com/lief-project/LIEF/issues/765 https://github.com/lief-project/LIEF/commit/175c3fde3fe1e3e011d72cf0562a52034eaac43c

Package

Installed

Affected

Info

lief

0.12.3

<0.15.0

show

Affected versions of the lief package are vulnerable to Information Disclosure due to the use of an uninitialized variable in the machd_reader.c component’s name parameter. The machd_reader.c component accepts the name parameter without proper initialization, allowing leakage of potentially sensitive memory contents. A local attacker can exploit this by invoking the machd_reader functionality with a crafted name parameter, causing the LIEF package to disclose unintended information from process memory.

lief

0.12.3

<0.13.0

show

LIEF 0.13.0 fixes a reachable assertion abort via the component BinaryStream.hpp.
https://github.com/lief-project/LIEF/issues/765
https://github.com/lief-project/LIEF/commit/175c3fde3fe1e3e011d72cf0562a52034eaac43c