Patchelf out-of-bounds read
Date: 2022-12
Affected: pip/patchelf
Attack vector: other
Category: vulnerability-disclosure
Severity: High
CVE: CVE-2022-44940
CWE: CWE-125
CVSS: 9.1 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H)

Patchelf v0.9 was discovered to contain an out-of-bounds read via the function modifyRPath at src/patchelf.cc.


Mitigations:

Architectural layers (MAESTRO):