35 matches found
libdwarf:fuzz_macro_dwarf5: Heap-buffer-overflow in _dwarf_read_line_table_header
Project: https://github.com/davea42/libdwarf-code.git Detailed Report: https://oss-fuzz.com/testcase?key=5135813562990592 Project: libdwarf Fuzzing Engine: afl Fuzz Target: fuzzmacrodwarf5 Job Type: aflasanlibdwarf Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...
CVE-2020-28163
libdwarf before 20201201 allows a dwarfprintlines.c NULL pointer dereference and application crash via a DWARF5 line-table header that has an invalid FORM for a pathname...
AZL-42090 CVE-2020-28163 affecting package libdwarf for versions less than 0.9.0-1
libdwarf before 20201201 allows a dwarfprintlines.c NULL pointer dereference and application crash via a DWARF5 line-table header that has an invalid FORM for a pathname...
CVE-2020-28163
libdwarf before 20201201 allows a dwarfprintlines.c NULL pointer dereference and application crash via a DWARF5 line-table header that has an invalid FORM for a pathname...
libdwarf:fuzz_srcfiles: Heap-double-free in _dwarf_read_line_table_header
Project: https://github.com/davea42/libdwarf-code.git Detailed Report: https://oss-fuzz.com/testcase?key=6015429578719232 Project: libdwarf Fuzzing Engine: libFuzzer Fuzz Target: fuzzsrcfiles Job Type: libfuzzerasanlibdwarf Platform Id: linux Crash Type: Heap-double-free Crash Address:...
SUSE CVE-2016-5035
The dwarfreadlinetableheader function in dwarflinetablereader.c in libdwarf before 20160923 allows remote attackers to cause a denial of service out-of-bounds read via a crafted file...
SUSE CVE-2020-28163
libdwarf before 20201201 allows a dwarfprintlines.c NULL pointer dereference and application crash via a DWARF5 line-table header that has an invalid FORM for a pathname...
PT-2025-37591
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak was resolved in the ocfs2 stack glue init function within the OCFS2 module. Specifically, the ocfs2 table header was not being freed if ocfs2 sysfs init failed, leading to ...
libdwarf 代码问题漏洞
libdwarf is a library and command line tool for reading and writing the DWARF2 standardized debug data format. A security vulnerability exists in libdwarf that stems from a null pointer dereference due to a corrupted line table header...
PT-2020-17604
Name of the Vulnerable Software and Affected Versions Qualcomm Snapdragon versions affected versions not specified Description The issue occurs due to out of bound writes when accessing the usage table header entry beyond the allocated memory for the header. This affects various Qualcomm Snapdrag...
PT-2017-2273 · Microsoft · Edge +2
Name of the Vulnerable Software and Affected Versions: Microsoft Internet Explorer versions 10 through 11 Microsoft Edge affected versions not specified Description: The issue is caused by a type confusion problem in the Layout::MultiColumnBoxBuilder::HandleColumnBreakOnColumnSpanningElement...
UBUNTU-CVE-2016-5035
The dwarfreadlinetableheader function in dwarflinetablereader.c in libdwarf before 20160923 allows remote attackers to cause a denial of service out-of-bounds read via a crafted file...
libdwarf dwarf_line_table_reader.c File Denial of Service Vulnerability
libdwarf is a set of tools for reading and writing DWARF2 debugging information. A security vulnerability exists in the 'dwarfreadlinetableheader' function in the libdwarflinetablereader.c file. An attacker can exploit this vulnerability to cause a denial of service OOB read...
CVE-2013-0729: Improper Restriction of Operations within the Bounds of a Memory Buffer
Heap-based buffer overflow in Tracker Software PDF-XChange before 2.5.208 allows remote attackers to execute arbitrary code via a crafted Define Huffman Table header in a JPEG image file stream in a PDF file...
Heap overflow
Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.7 and 8.4 allows context-dependent attackers to affect availability via unknown vectors related to Outside In Filters, a different vulnerability than CVE-2013-0393. NOTE: the previous informati...