CVE-2022-39170

Summary: CVE-2022-39170 affects libdwarf. A double-free in the function _dwarf_exec_frame_instr (dwarf_frame.c) can lead to a crash or denial of service as described in vendor advisories. Connected sources indicate affected package libdwarf and remediation via updated packages (e.g., libdwarf 0.5...

CVE-2022-32200

CVE-2022-32200 affects libdwarf 0.4.0 and is caused by a heap-based buffer over-read in the function _dwarf_check_string_valid within dwarf_util.c . The vulnerability is documented with CVSS metrics (CVSSv2 base 6.8; CVSSv3.1 base 7.8) indicating partial confidentiality, integrity, and availabili...

CVE-2022-34299

CVE-2022-34299 affects libdwarf 0.4.0 with a heap-based buffer over-read in function dwarf_global_formref_b. The vulnerability can lead to a crash/denial of service as described by Red Hat and related sources. Several connected records indicate fixes for newer libdwarf versions (e.g., 0.4.2 in OS...