MAL-2025-19011 Malicious code in dwarf-jupiter-e8xo (npm)

The package dwarf-jupiter-e8xo was found to contain malicious code...

Malicious code in alpha-dwarf-7dhp (npm)

The package alpha-dwarf-7dhp was found to contain malicious code...

MAL-2025-37782 Malicious code in uniform-dwarf-ckiz (npm)

The package uniform-dwarf-ckiz was found to contain malicious code...

Malicious code in dwarf-dragonfruit-95wq (npm)

The package dwarf-dragonfruit-95wq was found to contain malicious code...

MAL-2025-19006 Malicious code in dwarf-carrot-9tr9 (npm)

The package dwarf-carrot-9tr9 was found to contain malicious code...

MAL-2025-19008 Malicious code in dwarf-dragonfruit-95wq (npm)

The package dwarf-dragonfruit-95wq was found to contain malicious code...

MAL-2025-19012 Malicious code in dwarf-kangaroo-bfyu (npm)

The package dwarf-kangaroo-bfyu was found to contain malicious code...

Malicious code in dwarf-carrot-9tr9 (npm)

The package dwarf-carrot-9tr9 was found to contain malicious code...

MAL-2025-19016 Malicious code in dwarf-zamia-cpzy (npm)

The package dwarf-zamia-cpzy was found to contain malicious code...

MAL-2025-26753 Malicious code in mountain-dwarf-y22j (npm)

The package mountain-dwarf-y22j was found to contain malicious code...

OSV-2025-608 Heap-buffer-overflow in _dwarf_memcpy_noswap_bytes

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=437060549 Crash type: Heap-buffer-overflow READ 4 Crash state: dwarfmemcpynoswapbytes dwarflengthofcuheader dwarfglobalnameoffsets...

PT-2025-33704 · Git · Libdwarf

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=437060549 Crash type: Heap-buffer-overflow READ 4 Crash state: dwarf memcpy noswap bytes dwarf length of cu header dwarf global name offsets...

SUSE CVE-2025-8225

A vulnerability was found in GNU Binutils 2.44 and classified as problematic. This issue affects the function processdebuginfo of the file binutils/dwarf.c of the component DWARF Section Handler. The manipulation leads to memory leak. Attacking locally is a requirement. The identifier of the patc...

GNU Binutils Resource Management Error Vulnerability

GNU Binutils is a binary toolset developed by the GNU Project to handle operations such as target files, assembly and linking. A memory leak vulnerability exists in GNU Binutils version 2.44, which originates from a processdebuginfo function handling exception in the binutils/dwarf.c file in the...

Missing Release of Memory after Effective Lifetime

Overview Affected versions of this package are vulnerable to Missing Release of Memory after Effective Lifetime via the processdebuginfo function in the dwarf.c file. An attacker can cause resource exhaustion by triggering repeated processing of specially crafted DWARF sections. Remediation A fix...

AZL-65955 CVE-2025-8225 affecting package binutils for versions less than 2.41-9

A vulnerability was found in GNU Binutils 2.44 and classified as problematic. This issue affects the function processdebuginfo of the file binutils/dwarf.c of the component DWARF Section Handler. The manipulation leads to memory leak. Attacking locally is a requirement. The identifier of the patc...

AZL-65960 CVE-2025-8225 affecting package binutils for versions less than 2.37-17

A vulnerability was found in GNU Binutils 2.44 and classified as problematic. This issue affects the function processdebuginfo of the file binutils/dwarf.c of the component DWARF Section Handler. The manipulation leads to memory leak. Attacking locally is a requirement. The identifier of the patc...

ALPINE-CVE-2025-8225

A vulnerability was found in GNU Binutils 2.44 and classified as problematic. This issue affects the function processdebuginfo of the file binutils/dwarf.c of the component DWARF Section Handler. The manipulation leads to memory leak. Attacking locally is a requirement. The identifier of the patc...

DEBIAN-CVE-2025-8225

A vulnerability was found in GNU Binutils 2.44 and classified as problematic. This issue affects the function processdebuginfo of the file binutils/dwarf.c of the component DWARF Section Handler. The manipulation leads to memory leak. Attacking locally is a requirement. The identifier of the patc...

UBUNTU-CVE-2025-8225

A vulnerability was found in GNU Binutils 2.44 and classified as problematic. This issue affects the function processdebuginfo of the file binutils/dwarf.c of the component DWARF Section Handler. The manipulation leads to memory leak. Attacking locally is a requirement. The identifier of the patc...