CVE-2024-2002

CVE-2024-2002 describes a double-free in libdwarf when processing a multiply-corrupted DWARF object, where an allocation may be freed twice, leading to unpredictable results. Multiple connected advisories (Red Hat, CBL Mariner, Tencent/TSSA, Azure Linux, etc.) confirm libdwarf as the vulnerable c...

CVE-2022-32200

CVE-2022-32200 affects libdwarf 0.4.0 and is caused by a heap-based buffer over-read in the function _dwarf_check_string_valid within dwarf_util.c . The vulnerability is documented with CVSS metrics (CVSSv2 base 6.8; CVSSv3.1 base 7.8) indicating partial confidentiality, integrity, and availabili...

CVE-2016-5040

CVE-2016-5040 affects libdwarf; versions prior to 20160923 are vulnerable. A large length value in a compilation unit header allows remote out-of-bounds reads, leading to a denial of service (crash). The issue is mitigated by upgrading libdwarf to the 20160923 release or applying the vendor patch...

CVE-2016-5041

CVE-2016-5041 concerns libdwarf. The vulnerability lies in the dwarf_macro5.c path (libdwarf) before 20160923, where a debugging information entry using DWARF5 and without a DW_AT_name can trigger a NULL pointer dereference, leading to a denial of service. The connected records (OSV, NVD, OpenVAS...

CVE-2016-5042

CVE-2016-5042 affects libdwarf. The vulnerable component is the function dwarf_get_aranges_list in libdwarf, with the issue present in versions before 20160923. A remote attacker can cause a denial of service (infinite loop and crash) by crafting a DWARF section. The provided connected documents ...

CVE-2016-9275

CVE-2016-9275 affects libdwarf. A heap-based buffer overflow in the _dwarf_skim_forms function (libdwarf/dwarf_macro5.c) could cause an out-of-bounds read and denial of service. The vulnerability is present in Libdwarf prior to 20161124; newer releases (20161124 and later) are expected to include...

CVE-2016-5036

CVE-2016-5036 affects libdwarf (dump_block in print_sections.c) and is exploitable remotely via crafted frame data to trigger an out-of-bounds read, causing denial of service. The vulnerability is tied to libdwarf versions before 2016-09-23 (the fix/version after this date is not specified in the...

CVE-2016-9276

The CVE-2016-9276 issue affects Libdwarf, where the function dwarf_get_aranges_list in dwarf_arrange.c handles DWARF aranges data in Libdwarf installations prior to 20161124. The vulnerability enables remote attackers to cause a denial of service via an out-of-bounds read in the affected code pat...

CVE-2016-5038

CVE-2016-5038 affects libdwarf; the vulnerable component is the function dwarf_get_macro_startend_file in dwarf_macro5.c, with versions before 20160923. The issue arises from an out-of-bounds read triggered by a crafted string offset in .debug_str, enabling a remote attacker to cause a denial of ...

CVE-2016-5044

CVE-2016-5044 concerns the libdwarf project. The vulnerability resides in the WRITE_UNALIGNED function implemented in dwarf_elf_access.c, with builds prior to 20160923. A crafted DWARF section can trigger an out-of-bounds write, leading to a denial of service (crash). The description and multiple...

CVE-2016-5039

CVE-2016-5039 affects the libdwarf library: the get_attr_value function before 20160923 can be triggered by a crafted object with all-bits on to cause a denial of service via an out-of-bounds read. The description in the Initial document states this exact effect; the connected documents list mult...

CVE-2016-5043

CVE-2016-5043 affects libdwarf’s dwarf_dealloc function. A crafted DWARF section can cause an out-of-bounds read, resulting in a denial of service (crash). Public sources consistently indicate the vulnerability exists in libdwarf pre-20160923; remediation is to use a patched libdwarf (20160923 or...