CVE-2022-39170

Summary: CVE-2022-39170 affects libdwarf. A double-free in the function _dwarf_exec_frame_instr (dwarf_frame.c) can lead to a crash or denial of service as described in vendor advisories. Connected sources indicate affected package libdwarf and remediation via updated packages (e.g., libdwarf 0.5...

CVE-2022-34299

CVE-2022-34299 affects libdwarf 0.4.0 with a heap-based buffer over-read in function dwarf_global_formref_b. The vulnerability can lead to a crash/denial of service as described by Red Hat and related sources. Several connected records indicate fixes for newer libdwarf versions (e.g., 0.4.2 in OS...