OSV-2026-54 Heap-use-after-free in _dwarf_exec_frame_instr

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=475563464 Crash type: Heap-use-after-free READ 8 Crash state: dwarfexecframeinstr dwarfgetfdeinfoforapcrow dwarfgetfdeinfoforallregs3b...

libdwarf:fuzz_set_frame_all: Heap-use-after-free in _dwarf_exec_frame_instr

Project: https://github.com/davea42/libdwarf-code.git Detailed Report: https://oss-fuzz.com/testcase?key=6159202753249280 Project: libdwarf Fuzzing Engine: afl Fuzz Target: fuzzsetframeall Job Type: aflasanlibdwarf Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address:...

libdwarf:fuzz_set_frame_all: Crash in _dwarf_exec_frame_instr

Project: https://github.com/davea42/libdwarf-code.git Detailed Report: https://oss-fuzz.com/testcase?key=5757752673435648 Project: libdwarf Fuzzing Engine: libFuzzer Fuzz Target: fuzzsetframeall Job Type: libfuzzerasanlibdwarf Platform Id: linux Crash Type: UNKNOWN READ Crash Address:...

libdwarf:fuzz_set_frame_all: Crash in _dwarf_exec_frame_instr

Project: https://github.com/davea42/libdwarf-code.git Detailed Report: https://oss-fuzz.com/testcase?key=6613067367317504 Project: libdwarf Fuzzing Engine: afl Fuzz Target: fuzzsetframeall Job Type: aflasanlibdwarf Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x605ffde00049 Crash...

libdwarf:fuzz_set_frame_all: Segv on unknown address in _dwarf_exec_frame_instr

Project: https://github.com/davea42/libdwarf-code.git Detailed Report: https://oss-fuzz.com/testcase?key=4582976972521472 Project: libdwarf Fuzzing Engine: honggfuzz Fuzz Target: fuzzsetframeall Job Type: honggfuzzasanlibdwarf Platform Id: linux Crash Type: Segv on unknown address Crash Address:...

CVE-2022-39170

libdwarf 0.4.1 has a double free in dwarfexecframeinstr in dwarfframe.c...

UBUNTU-CVE-2022-39170

libdwarf 0.4.1 has a double free in dwarfexecframeinstr in dwarfframe.c...

libdwarf: Resource management error vulnerability

libdwarf is a library and command line tool for reading and writing the DWARF2 standardized debug data format. A security vulnerability exists in versions of libdwarf prior to 0.4.1 that stems from a double release of dwarfexecframeinstr in its dwarfframe.c component...

CVE-2009-2911

SystemTap 1.0, when the --unprivileged option is used, does not properly restrict certain data sizes, which allows local users to 1 cause a denial of service or gain privileges via a print operation with a large number of arguments that trigger a kernel stack overflow, 2 cause a denial of service...

CVE-2009-2911

SystemTap 1.0, when the --unprivileged option is used, does not properly restrict certain data sizes, which allows local users to 1 cause a denial of service or gain privileges via a print operation with a large number of arguments that trigger a kernel stack overflow, 2 cause a denial of service...