CNNVD-202601-1718 Information

CNNVD ID

CNNVD-202601-1718

CVE-2025-15504

  • CNNVD Published: 2026-01-10

Description (Chinese)

LIEF是罗曼·托马斯(Romain Thomas)个人开发者的一个跨平台的库。用于解析、修改和抽象 Elf、Pe 和 MachO 格式。 LIEF 0.17.1及之前版本存在代码问题漏洞,该漏洞源于组件ELF Binary Parser中文件src/ELF/Parser.tcc存在空指针取消引用。

Description (English)

LIEF is a cross-platform library for Roman Thomas’ personal developer. used to parse, modify and abstract Elf, Pe and MachO formats. The LIF 0.17.1 and previous versions have a code problem loophole, which results from the empty pointer unreferenced in document src/ELF/Parser.tcc of component ELF Binary Parser.

Hazard Level

Critical

Vulnerability Type

代码问题

Affected Vendor

个人开发者

Published

2026-01-10

Last Modified

2026-02-24

References

https://github.com/lief-project/LIEF/issues/1277 https://github.com/lief-project/LIEF/releases/tag/0.17.2 https://vuldb.com/?id.340375 https://vuldb.com/?submit.733329 https://vuldb.com/?ctiid.340375 https://github.com/lief-project/LIEF/issues/1277#issuecomment-3693859001 https://github.com/lief-project/LIEF/commit/81bd5d7ea0c390563f1c4c017c9019d154802978 https://github.com/oneafter/1210/blob/main/segv1 https://access.redhat.com/security/cve/cve-2025-15504

Patch

https://lief.re/download/

Share on: