854 matches found
CVE-2026-116732
libdwarf through 2.3.3 contains a heap out-of-bounds read vulnerability in dwarfdebugaddrtable that omits the table starting offset when validating .debugaddr unit length. Attackers can supply a crafted object file with a non-zero offset table, causing dwarfdebugaddrbyindex to read past the heap...
SUSE CVE-2026-116732
libdwarf through 2.3.3 contains a heap out-of-bounds read vulnerability in dwarfdebugaddrtable that omits the table starting offset when validating .debugaddr unit length. Attackers can supply a crafted object file with a non-zero offset table, causing dwarfdebugaddrbyindex to read past the heap...
CVE-2026-116732
A flaw was found in libdwarf. When parsing debug address tables, the library fails to properly account for starting offsets when verifying section length boundaries. An attacker could exploit this vulnerability by tricking a user or automated system into parsing a specially crafted object file,...
EUVD-2026-110480
libdwarf through 2.3.3 contains a heap out-of-bounds read vulnerability in dwarfdebugaddrtable that omits the table starting offset when validating .debugaddr unit length. Attackers can supply a crafted object file with a non-zero offset table, causing dwarfdebugaddrbyindex to read past the heap...
Linux Distros Unpatched Vulnerability : CVE-2026-116732
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libdwarf through 2.3.3 contains a heap out-of-bounds read vulnerability in dwarfdebugaddrtable that omits the table starting offset when validating .debugaddr...
AZL-111131 CVE-2026-116732 affecting package libdwarf 0.9.2-1
libdwarf through 2.3.3 contains a heap out-of-bounds read vulnerability in dwarfdebugaddrtable that omits the table starting offset when validating .debugaddr unit length. Attackers can supply a crafted object file with a non-zero offset table, causing dwarfdebugaddrbyindex to read past the heap...
DEBIAN-CVE-2026-116732
libdwarf through 2.3.3 contains a heap out-of-bounds read vulnerability in dwarfdebugaddrtable that omits the table starting offset when validating .debugaddr unit length. Attackers can supply a crafted object file with a non-zero offset table, causing dwarfdebugaddrbyindex to read past the heap...
CVE-2026-116732
libdwarf through 2.3.3 contains a heap out-of-bounds read vulnerability in dwarfdebugaddrtable that omits the table starting offset when validating .debugaddr unit length. Attackers can supply a crafted object file with a non-zero offset table, causing dwarfdebugaddrbyindex to read past the heap...
CVE-2026-116732
The libdwarf library (through version 2.3.3 ) contains a heap out-of-bounds read vulnerability within the dwarf_debug_addr_table() function. The root cause is the omission of the table starting offset during the validation of the .debug_addr unit length. An attacker can exploit this by providing ...
CVE-2026-116732 libdwarf through 2.3.3 Heap Out-of-Bounds Read via dwarf_debug_addr_table
libdwarf through 2.3.3 contains a heap out-of-bounds read vulnerability in dwarfdebugaddrtable that omits the table starting offset when validating .debugaddr unit length. Attackers can supply a crafted object file with a non-zero offset table, causing dwarfdebugaddrbyindex to read past the heap...
CVE-2026-116732 libdwarf through 2.3.3 Heap Out-of-Bounds Read via dwarf_debug_addr_table
libdwarf through 2.3.3 contains a heap out-of-bounds read vulnerability in dwarfdebugaddrtable that omits the table starting offset when validating .debugaddr unit length. Attackers can supply a crafted object file with a non-zero offset table, causing dwarfdebugaddrbyindex to read past the heap...
CVE-2026-116732 libdwarf through 2.3.3 Heap Out-of-Bounds Read via dwarf_debug_addr_table
libdwarf through 2.3.3 contains a heap out-of-bounds read vulnerability in dwarfdebugaddrtable that omits the table starting offset when validating .debugaddr unit length. Attackers can supply a crafted object file with a non-zero offset table, causing dwarfdebugaddrbyindex to read past the heap...
CVE-2026-116732
libdwarf through 2.3.3 contains a heap out-of-bounds read vulnerability in dwarfdebugaddrtable that omits the table starting offset when validating .debugaddr unit length. Attackers can supply a crafted object file with a non-zero offset table, causing dwarfdebugaddrbyindex to read past the heap...
PT-2026-125481
Name of the Vulnerable Software and Affected Versions libdwarf versions prior to 2.3.4 Description A heap out-of-bounds read occurs in the dwarf debug addr table function when the table starting offset is omitted during the validation of the .debug addr unit length. An attacker can provide a...
David Anderson libdwarf buffer error vulnerability
David Anderson: Libdwarf versions 2.3.3 and earlier contain a buffer error vulnerability. This vulnerability arises because the dwarfdebugaddrtable function omits the table’s starting offset when validating the length of the .debugaddr element, potentially leading to heap-based out-of-bounds read...
libdwarf:fuzz_showsectgrp: Heap-double-free in _dwarf_load_elf_symtab_symbols
Project: https://github.com/davea42/libdwarf-code.git Detailed Report: https://oss-fuzz.com/testcase?key=5634424300699648 Project: libdwarf Fuzzing Engine: libFuzzer Fuzz Target: fuzzshowsectgrp Job Type: libfuzzerasanlibdwarf Platform Id: linux Crash Type: Heap-double-free Crash Address:...
libdwarf:fuzz_findfuncbypc: Heap-double-free in _dwarf_destruct_elf_nlaccess
Project: https://github.com/davea42/libdwarf-code.git Detailed Report: https://oss-fuzz.com/testcase?key=5181686974578688 Project: libdwarf Fuzzing Engine: afl Fuzz Target: fuzzfindfuncbypc Job Type: aflasanlibdwarf Platform Id: linux Crash Type: Heap-double-free Crash Address: 0x7adb935e0680 Cra...
Linux Distros Unpatched Vulnerability : CVE-2022-39170
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libdwarf 0.4.1 has a double free in dwarfexecframeinstr in dwarfframe.c. CVE-2022-39170 Note that Nessus relies on the presence of the package as reported by th...
libdwarf:fuzz_set_frame_all: Heap-use-after-free in _dwarf_exec_frame_instr
Project: https://github.com/davea42/libdwarf-code.git Detailed Report: https://oss-fuzz.com/testcase?key=6159202753249280 Project: libdwarf Fuzzing Engine: afl Fuzz Target: fuzzsetframeall Job Type: aflasanlibdwarf Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address:...