Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:25166
HistoryMay 05, 2020 - 4:43 a.m.

Unauthorized Access

2020-05-0504:43:07
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8

EPSS

0

Percentile

5.1%

libunwind.so is vulnerable to unauthorised access. The vulnerability exists because it uses invalid dwarf opcodesDW_OP_bregXX in the dwarf_to_unw_regnum function in include/dwarf_i.h, causing off-by-one error referencing beyond the end of the array.