CVE-2019-14249

CVE-2019-14249 affects libdwarf; the issue is in dwarf_elf_load_headers.c prior to 2019-07-05, where processing an ELF with a zero-size section group (SHT_GROUP) can cause a division by zero in dwarfdump, leading to DoS. Affected component is libdwarf; root cause is division by zero when loading ...

CVE-2020-27545

CVE-2020-27545 affects libdwarf: before 20201017 there is a one-byte out-of-bounds read caused by an invalid pointer dereference via an invalid line table in a crafted object. This can lead to a crash (DoS) and availability impact. The CVSS v3.1 base score is 6.5 (Medium); attack vector: Network,...

CVE-2020-28163

CVE-2020-28163 affects libdwarf prior to 20201201. A NULL pointer dereference in the dwarf_print_lines.c path occurs when a DWARF5 line-table header uses an invalid FORM for a pathname, leading to an application crash. Public vulnerability descriptions consistently cite this as the root cause; ex...

CVE-2015-8750

CVE-2015-8750 affects the libdwarf component (up to and including 20151114) and is due to a NULL pointer dereference in a debug_abbrev section marked NOBITS inside an ELF file, which can enable a remote denial of service (crash). The provided documents consistently describe the vulnerability as a...

CVE-2015-8538

CVE-2015-8538 affects libdwarf, specifically the dwarf_leb.c routine, allowing attackers to cause a denial of service (SIGSEGV). The connected sources confirm this is a DoS in libdwarf and reference multiple advisories; no concrete patch/version remediation details are provided in the supplied do...

CVE-2016-5033

CVE-2016-5033 : The print_exprloc_content function in libdwarf before 20160923 allows a remote attacker to cause a denial of service via an out-of-bounds read when processing a crafted file. This is documented across multiple sources (NVD, OSV, and Nessus/NASL entries). The provided materials do ...

CVE-2016-7510

CVE-2016-7510 affects libdwarf, specifically the read_line_table_program function in dwarf_line_table_reader_common.c, with the vulnerability dating to libdwarf before 20160923. A crafted input can trigger an out-of-bounds read, enabling remote denial of service. The issue is confirmed by connect...

CVE-2016-5028

CVE-2016-5028 affects libdwarf (print_frame_inst_bytes) and is described as a denial of service via a NULL pointer dereference when processing an object file with empty bss-like sections, using libdwarf prior to 20160923. Connected documents confirm the vulnerability exists in libdwarf and list a...

CVE-2016-5029

CVE-2016-5029 affects libdwarf prior to 2016-09-23. A crafted DWARF file can trigger a denial of service via a NULL pointer dereference in create_fullest_file_path. Documented in multiple sources (NVD, OSV, OSV-UBUNTU, EulerOS notes) with the same root cause. Exploitation details are not elaborat...

CVE-2016-5032

CVE-2016-5032 : In libdwarf, the function dwarf_get_xu_hash_entry (pre-2016-09-23) is vulnerable to a denial-of-service crash when processing a crafted file. This is consistently reported across sources (OSV/NVD/NASL references). No public exploitation details or patched versions are provided in ...

CVE-2016-5030

CVE-2016-5030 affects libdwarf prior to 20160923. The vulnerability is a NULL pointer dereference in the _dwarf_calculate_info_section_end_ptr function, exploitable by processing a crafted file. Exploitation status and exact affected products beyond the library are not detailed in the provided do...

CVE-2016-8679

CVE-2016-8679 affects the Libdwarf project. The issue is in the function _dwarf_get_size_of_val in libdwarf/dwarf_util.c, where calling dwarfdump on a crafted file can lead to an out-of-bounds read. Affected library version is Libdwarf before 20161124. The connected documents provide technical de...

CVE-2016-8680

CVE-2016-8680 concerns libdwarf’s dwarf_util.c: the function _dwarf_get_abbrev_for_code in libdwarf 20161001 and earlier may read out of bounds when invoked via dwarfdump on a crafted file, enabling a denial of service. Connected sources corroborate the issue across multiple advisories and OSV li...

CVE-2014-9482

CVE-2014-9482 is a use-after-free vulnerability in libdwarf's dwarfdump (versions 20130126 through 20140805) that could allow a remote attacker to crash the program via a crafted ELF file. The connected documents confirm the affected component, the vulnerable function surface, and the impact (den...

CVE-2016-5037

CVE-2016-5037 affects libdwarf; the _dwarf_load_section function in libdwarf prior to 20160923 is vulnerable to remote exploitation via a crafted file, causing a denial of service through a NULL pointer dereference. Public docs provide CVSS scores (v2: 4.3; v3.1: 6.5) and confirm the vulnerabilit...

CVE-2017-9998

CVE-2017-9998 concerns the libdwarf project. The vulnerability arises in the function _dwarf_decode_s_leb128_chk in dwarf_leb.c, with libdwarf versions affected up to 2017-06-28, allowing remote attackers to cause a denial of service (Segmentation fault) via a crafted file. Impact is a crash/DoS ...

CVE-2016-2050

CVE-2016-2050 affects libdwarf-20151114 (get_abbrev_array_info). A crafted ELF file can trigger an out-of-bounds write, enabling remote denial of service. Debian/Dwarfutils advisory DLA-669-1 notes this alongside other related CVEs and states fixes in version 20120410-2+deb7u2 for Debian 7; other...

CVE-2016-5034

CVE-2016-5034 affects libdwarf (dwarf_elf_access.c) with an out-of-bounds write via a crafted ELF file, vulnerable in versions before 20160923. Remote denial of service is stated. Connected documents consistently describe this vulnerability as part of the libdwarf set of CVEs; no explicit patch v...

CVE-2016-5035

CVE-2016-5035 describes a vulnerability in libdwarf: the function _dwarf_read_line_table_header in dwarf_line_table_reader.c is vulnerable in versions before 20160923. A crafted file can trigger an out-of-bounds read, allowing remote attackers to cause a denial of service. The issue is documented...