CVE-2022-34299

A buffer-overflow vulnerability was found in libdwarf’s dwarf_global_formref_b() function in dwarf_form.c. A carefully crafted .debug_info causes libdwarf to read outside a buffer containing a Dwarf_Sig8 symbolic reference. This issue can cause a segmentation violation or other major error, terminating the calling application and resulting in a denial of service.