CVE-2024-31636

LowCVSS 3.9

Published: 03/05/2024(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.24%

15th percentile - higher than 15% of all known CVEs

An issue in LIEF v.0.14.1 allows a local attacker to obtain sensitive information via the 'name' parameter in the machd_reader.c component.

The risk involves potential leakage of confidential data, which may compromise the security of applications using LIEF and enable further attacks.

It is recommended to immediately update the LIEF library to the latest available version that includes a fix for this vulnerability.

Original NVD description (English source)

An issue in LIEF v.0.14.1 allows a local attacker to obtain sensitive information via the name parameter of the machd_reader.c component.