ByteOS Network

Vulnerability Details :

CVE-2022-38496

Summary

Assigner-mitre

Assigner Org ID-8254265b-2729-46b6-b9e3-3dfca2d5bfca

Published At-13 Sep, 2022 | 20:16

Updated At-03 Aug, 2024 | 10:54

LIEF commit 365a16a was discovered to contain a reachable assertion abort via the component BinaryStream.hpp.

EPSS History

Score

Latest Score

N/A

Percentile

Latest Percentile

N/A

▼Common Vulnerabilities and Exposures (CVE)

cve.org

Assigner:mitre

Assigner Org ID:8254265b-2729-46b6-b9e3-3dfca2d5bfca

Published At:13 Sep, 2022 | 20:16

Updated At:03 Aug, 2024 | 10:54

▼CVE Numbering Authority (CNA)

LIEF commit 365a16a was discovered to contain a reachable assertion abort via the component BinaryStream.hpp.

Affected Products

Vendor

n/a

Product

n/a

Versions

Affected

Problem Types

Type	CWE ID	Description
text	N/A	n/a

Type: text

CWE ID: N/A

Description: n/a

References

Hyperlink	Resource
https://github.com/lief-project/LIEF/issues/765	x_refsource_MISC

Hyperlink: https://github.com/lief-project/LIEF/issues/765

Resource:

x_refsource_MISC

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
https://github.com/lief-project/LIEF/issues/765	x_refsource_MISC x_transferred

Hyperlink: https://github.com/lief-project/LIEF/issues/765

Resource:

x_refsource_MISC

x_transferred

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:cve@mitre.org

Published At:13 Sep, 2022 | 21:15

Updated At:18 Sep, 2022 | 01:02

LIEF commit 365a16a was discovered to contain a reachable assertion abort via the component BinaryStream.hpp.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	5.5	MEDIUM	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Type: Primary

Version: 3.1

Base score: 5.5

Base severity: MEDIUM

Vector:

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

CPE Matches

lief-project>>lief>>Versions up to 0.12.1(inclusive)

cpe:2.3:a:lief-project:lief:*:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-617	Primary	nvd@nist.gov

CWE ID: CWE-617

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
https://github.com/lief-project/LIEF/issues/765	cve@mitre.org	Exploit Issue Tracking Patch Third Party Advisory

Hyperlink: https://github.com/lief-project/LIEF/issues/765

Source: cve@mitre.org

Resource:

Exploit

Issue Tracking

Patch

Third Party Advisory

Similar CVEs

60Records found

CVE-2021-45861

Matching Score-4

Assigner-MITRE Corporation

View Details

Matching Score-4

Assigner-MITRE Corporation

CVSS Score-5.5||MEDIUM

EPSS-0.14% / 33.38%

7 Day CHG~0.00%

Published-01 Mar, 2022 | 23:47

Updated-04 Aug, 2024 | 04:54

There is an Assertion `num <= INT_BIT' failed at BitStreamReader::skipBits in /bitStream.h:132 of tsMuxer git-c6a0277.

Vendor-tsmuxer_project n/a

Product-tsmuxer n/a

CWE ID-CWE-617

Reachable Assertion

CVE-2021-46514

Matching Score-4

Assigner-MITRE Corporation

View Details

Matching Score-4

Assigner-MITRE Corporation

CVSS Score-5.5||MEDIUM

EPSS-0.14% / 33.38%

7 Day CHG~0.00%

Published-27 Jan, 2022 | 20:22

Updated-04 Aug, 2024 | 05:10

There is an Assertion 'ppos != NULL && mjs_is_number(*ppos)' failed at src/mjs_core.c in Cesanta MJS v2.20.0.

Vendor-cesanta n/a

Product-mjs n/a

CWE ID-CWE-617

Reachable Assertion

CVE-2021-46350

Matching Score-4

Assigner-MITRE Corporation

View Details

Matching Score-4

Assigner-MITRE Corporation

CVSS Score-5.5||MEDIUM

EPSS-0.14% / 33.34%

7 Day CHG~0.00%

Published-20 Jan, 2022 | 21:14

Updated-04 Aug, 2024 | 05:02

There is an Assertion 'ecma_is_value_object (value)' failed at jerryscript/jerry-core/ecma/base/ecma-helpers-value.c in JerryScript 3.0.0.

Vendor-jerryscript n/a

Product-jerryscript n/a

CWE ID-CWE-617

Reachable Assertion

CVE-2021-46517

Matching Score-4

Assigner-MITRE Corporation

View Details

Matching Score-4

Assigner-MITRE Corporation

CVSS Score-5.5||MEDIUM

EPSS-0.14% / 33.38%

7 Day CHG~0.00%

Published-27 Jan, 2022 | 20:22

Updated-04 Aug, 2024 | 05:10

There is an Assertion `mjs_stack_size(&mjs->scopes) > 0' failed at src/mjs_exec.c in Cesanta MJS v2.20.0.

Vendor-cesanta n/a

Product-mjs n/a

CWE ID-CWE-617

Reachable Assertion

CVE-2019-5020

Matching Score-4

Assigner-Talos

View Details

Matching Score-4

Assigner-Talos

CVSS Score-6.5||MEDIUM

EPSS-0.29% / 52.06%

7 Day CHG~0.00%

Published-31 Jul, 2019 | 16:38

Updated-04 Aug, 2024 | 19:40

An exploitable denial of service vulnerability exists in the object lookup functionality of Yara 3.8.1. A specially crafted binary file can cause a negative value to be read to satisfy an assert, resulting in Denial of Service. An attacker can create a malicious binary to trigger this vulnerability.

Vendor-virustotal n/a

Product-yara Yara Object

CWE ID-CWE-617

Reachable Assertion

CWE ID-CWE-754

Improper Check for Unusual or Exceptional Conditions

CVE-2023-31918

Matching Score-4

Assigner-MITRE Corporation

View Details

Matching Score-4

Assigner-MITRE Corporation

CVSS Score-5.5||MEDIUM

EPSS-0.07% / 21.61%

7 Day CHG~0.00%

Published-12 May, 2023 | 00:00

Updated-24 Jan, 2025 | 20:15

Jerryscript 3.0 (commit 1a2c047) was discovered to contain an Assertion Failure via the parser_parse_function_arguments at jerry-core/parser/js/js-parser.c.

Vendor-jerryscript n/a

Product-jerryscript n/a

CWE ID-CWE-617

Reachable Assertion

CVE-2018-5269

Matching Score-4

Assigner-MITRE Corporation

View Details

Matching Score-4

Assigner-MITRE Corporation

CVSS Score-5.5||MEDIUM

EPSS-0.48% / 65.09%

7 Day CHG~0.00%

Published-08 Jan, 2018 | 05:00

Updated-05 Aug, 2024 | 05:33

In OpenCV 3.3.1, an assertion failure happens in cv::RBaseStream::setPos in modules/imgcodecs/src/bitstrm.cpp because of an incorrect integer cast.

Vendor-opencv n/a Debian GNU/Linux

Product-debian_linux opencv n/a

CWE ID-CWE-617

Reachable Assertion

CVE-2021-46510

Matching Score-4

Assigner-MITRE Corporation

View Details

Matching Score-4

Assigner-MITRE Corporation

CVSS Score-5.5||MEDIUM

EPSS-0.14% / 33.38%

7 Day CHG~0.00%

Published-27 Jan, 2022 | 20:22

Updated-04 Aug, 2024 | 05:10

There is an Assertion `s < mjs->owned_strings.buf + mjs->owned_strings.len' failed at src/mjs_gc.c in Cesanta MJS v2.20.0.

Vendor-cesanta n/a

Product-mjs n/a

CWE ID-CWE-617

Reachable Assertion

CVE-2019-13223

Matching Score-4

Assigner-MITRE Corporation

View Details

Matching Score-4

Assigner-MITRE Corporation

CVSS Score-5.5||MEDIUM

EPSS-0.23% / 45.80%

7 Day CHG~0.00%

Published-15 Aug, 2019 | 00:00

Updated-04 Aug, 2024 | 23:49

A reachable assertion in the lookup1_values function in stb_vorbis through 2019-03-04 allows an attacker to cause a denial of service by opening a crafted Ogg Vorbis file.

Vendor-stb_vorbis_project n/a Debian GNU/Linux

Product-debian_linux stb_vorbis n/a

CWE ID-CWE-617

Reachable Assertion

CVE-2023-31920

Matching Score-4

Assigner-MITRE Corporation

View Details

Matching Score-4

Assigner-MITRE Corporation

CVSS Score-5.5||MEDIUM

EPSS-0.18% / 39.80%

7 Day CHG~0.00%

Published-12 May, 2023 | 00:00

Updated-24 Jan, 2025 | 16:15

Jerryscript 3.0 (commit 05dbbd1) was discovered to contain an Assertion Failure via the vm_loop at jerry-core/vm/vm.c.

Vendor-jerryscript n/a

Product-jerryscript n/a

CWE ID-CWE-617

Reachable Assertion

CVE-2022-38496

Credits

Vendors

Products

Metrics (CVSS)

Weaknesses

Attack Patterns

Solution/Workaround

References

EPSS History

Score

Latest Score

N/A

Percentile

Latest Percentile

N/A

Stakeholder-Specific Vulnerability Categorization (SSVC)

Affected Products

Affected

Problem Types

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

Affected Products

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History

Similar CVEs