673 matches found
CVE-2025-11081 GNU Binutils objdump.c dump_dwarf_section out-of-bounds
A vulnerability was detected in GNU Binutils 2.45. This issue affects the function dumpdwarfsection of the file binutils/objdump.c. Performing manipulation results in out-of-bounds read. The attack is only possible with local access. The exploit is now public and may be used. The patch is named...
CVE-2025-11081 GNU Binutils objdump.c dump_dwarf_section out-of-bounds
A vulnerability was detected in GNU Binutils 2.45. This issue affects the function dumpdwarfsection of the file binutils/objdump.c. Performing manipulation results in out-of-bounds read. The attack is only possible with local access. The exploit is now public and may be used. The patch is named...
CVE-2025-11081
A vulnerability was detected in GNU Binutils 2.45. This issue affects the function dumpdwarfsection of the file binutils/objdump.c. Performing manipulation results in out-of-bounds read. The attack is only possible with local access. The exploit is now public and may be used. The patch is named...
PT-2025-39748
Name of the Vulnerable Software and Affected Versions GNU Binutils version 2.45 Description A flaw exists in GNU Binutils 2.45 within the dump dwarf section function located in the binutils/objdump.c file. Manipulation of the software can lead to an out-of-bounds read. This issue is exploitable...
GNU Binutils 缓冲区错误漏洞
GNU Binutils GNU Binary Utilities is a set of programming language utility programs developed by the American GNU community. The programs are primarily used to work with target files in a variety of formats, and provide connectors, assemblers, and other tools for target files and archives. A buff...
NVIDIA cuobjdump DWARF debug abbreviations parsing arbitrary code execution vulnerability
Talos Vulnerability Report TALOS-2025-2155 NVIDIA cuobjdump DWARF debug abbreviations parsing arbitrary code execution vulnerability September 24, 2025 CVE Number CVE-2025-23339 SUMMARY An arbitrary code execution vulnerability exists in the DWARF parsing functionality of NVIDIA cuobjdump 12.8.55...
GNU Binutils DWARF Section dwarf.c process_debug_info memory leak
...
libdwarf before 20201201 allows a dwarf_print_lines.c NULL pointer dereference and application crash via a DWARF5 line-table header that has an invalid FORM for a pathname.
...
The _dwarf_get_abbrev_for_code function in dwarf_util.c in libdwarf 20161001 and earlier allows remote attackers to cause a denial of service (out-of-bounds read) by calling the dwarfdump command on a crafted file.
...
Linux Distros Unpatched Vulnerability : CVE-2020-24822
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability in the dwarf::cursor::uleb function of Libelfin v0.3 allows attackers to cause a denial of service DOS through a segmentation fault via a crafte...
Linux Distros Unpatched Vulnerability : CVE-2020-24821
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability in the dwarf::cursor::skipform function of Libelfin v0.3 allows attackers to cause a denial of service DOS through a segmentation fault via a...
Linux Distros Unpatched Vulnerability : CVE-2020-16269
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - radare2 4.5.0 misparses DWARF information in executable files, causing a segmentation fault in parsetypedef in typedwarf.c via a malformed DWATname in the...
Linux Distros Unpatched Vulnerability : CVE-2018-14015
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The sdbsetinternal function in sdb.c in radare2 2.7.0 allows remote attackers to cause a denial of service invalid read and application crash via a crafted ELF...
Linux Distros Unpatched Vulnerability : CVE-2015-3239
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Off-by-one error in the dwarftounwregnum function in include/dwarfi.h in libunwind 1.1 allows local users to have unspecified impact via invalid dwarf opcodes...
Oracle Linux 8 : go-toolset:rhel8 (ELSA-2025-13940)
The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-13940 advisory. delve 1.24.1-1.0.1 - Disable DWARF compression which has issues Alex Burmashev golang 1.24.6-1 - Update to Go 1.24.6 fips-1 - Resolves: RHEL-106455 go-toolset...
go-toolset:rhel8 security update
delve 1.24.1-1.0.1 - Disable DWARF compression which has issues Alex Burmashev golang 1.24.6-1 - Update to Go 1.24.6 fips-1 - Resolves: RHEL-106455 go-toolset 1.24.6-1 - Update to Go 1.24.6 fips-1 - Resolves: RHEL-106455...
Linux Distros Unpatched Vulnerability : CVE-2020-24823
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability in the dwarf::tostring function of Libelfin v0.3 allows attackers to cause a denial of service DOS through a segmentation fault via a crafted EL...
Malicious code in dwarf-zamia-cpzy (npm)
The package dwarf-zamia-cpzy was found to contain malicious code...