-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| lief | pip | <= 0.12.1 |
Miggo AIRoot Cause AnalysisThe vulnerability stems from the unvalidated iterator in Binary::segment_from_offset. The commit diff shows a fix adding a check for 'it != std::end(offset_seg_)', confirming the root cause was an invalid iterator dereference. While the crash occurs in SegmentCommand::virtual_address (as shown in the ASAN trace), this is a consequence of the invalid SegmentCommand pointer returned by segment_from_offset. The primary vulnerable code path is in Binary.cpp's segment_from_offset function.
A Semantic Attack on Google Gemini - Read the Latest Research