CVE-2024-2002

Libdwarf: crashes randomly on fuzzed object

A double-free vulnerability was found in libdwarf. In a multiply-corrupted DWARF object, libdwarf may try to dealloc(free) an allocation twice, potentially causing unpredictable and various results.

CVSS 3.1 · 7.5 High EPSS 1.1% KEV · Not listed

Vendors

Fedoraproject Libdwarf Project Redhat

Products

Fedora Libdwarf Enterprise Linux and 1 more

CVE-2026-116732

libdwarf through 2.3.3 Heap Out-of-Bounds Read via dwarf_debug_addr_table

libdwarf through 2.3.3 contains a heap out-of-bounds read vulnerability in dwarf_debug_addr_table() that omits the table starting offset when validating .debug_addr unit length. Attackers can supply a crafted object file with a non-zero offset table, causing dwarf_debug_addr_by_index() to read past the heap buffer, disclosing adjacent heap bytes or crashing consumers.

CVSS 4.0 · 4.8 Medium EPSS < 1% KEV · Not listed

Vendors

Libdwarf Project

Products

Libdwarf

CVE-2015-8750

libdwarf: NULL pointer dereference in dwarf_utils.c

libdwarf 20151114 and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a debug_abbrev section marked NOBITS in an ELF file.

CVSS 3.1 · 6.5 Medium EPSS 1.9% KEV · Not listed

Vendors

Libdwarf Project

Products

Libdwarf

CVE-2015-8538

libdwarf: Out-of-bounds read in dwarf_leb.c

dwarf_leb.c in libdwarf allows attackers to cause a denial of service (SIGSEGV).

CVSS 3.1 · 6.5 Medium EPSS 1.2% KEV · Not listed

Vendors

Libdwarf Project

Products

Libdwarf

CVE-2016-5027

libdwarf: Null pointer dereference in _dwarf_decode_s_leb128

dwarf_form.c in libdwarf 20160115 allows remote attackers to cause a denial of service (crash) via a crafted elf file.

CVSS 3.0 · 5.5 Medium EPSS 1.5% KEV · Not listed

Vendors

Libdwarf Project

Products

Libdwarf

CVE-2016-5031

libdwarf: Out-of-bounds read in print_frame_inst_bytes() function

The print_frame_inst_bytes function in libdwarf before 20160923 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted file.

CVSS 3.1 · 5.5 Medium EPSS 2.0% KEV · Not listed

Vendors

Libdwarf Project

Products

Libdwarf

CVE-2016-5028

libdwarf: Null pointer dereference in print_frame_inst_bytes()

The print_frame_inst_bytes function in libdwarf before 20160923 allows remote attackers to cause a denial of service (NULL pointer dereference) via an object file with empty bss-like sections.

CVSS 3.1 · 6.5 Medium EPSS 2.9% KEV · Not listed

Vendors

Libdwarf Project

Products

Libdwarf

CVE-2016-5038

libdwarf: Out-of-bounds read in dwarf_get_macro_startend_file()

The dwarf_get_macro_startend_file function in dwarf_macro5.c in libdwarf before 20160923 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted string offset for .debug_str.

CVSS 3.1 · 7.5 High EPSS 4.4% KEV · Not listed

Vendors

Libdwarf Project

Products

Libdwarf

CVE-2016-5029

libdwarf: Null pointer dereference in create_fullest_file_path()

The create_fullest_file_path function in libdwarf before 20160923 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted dwarf file.

CVSS 3.1 · 6.5 Medium EPSS 2.9% KEV · Not listed

Vendors

Libdwarf Project

Products

Libdwarf

CVE-2016-5030

libdwarf: Null pointer dereference in _dwarf_calculate_info_section_end_ptr()

The _dwarf_calculate_info_section_end_ptr function in libdwarf before 20160923 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted file.

CVSS 3.1 · 6.5 Medium EPSS 2.9% KEV · Not listed

Vendors

Libdwarf Project

Products

Libdwarf

CVE-2016-5033

libdwarf: Out-of-bounds read in print_explroc_content

The print_exprloc_content function in libdwarf before 20160923 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted file.

CVSS 3.1 · 6.5 Medium EPSS 2.9% KEV · Not listed

Vendors

Libdwarf Project

Products

Libdwarf

CVE-2016-5034

libdwarf: Out-of-bounds write in dwarf_elf_access.c

dwarf_elf_access.c in libdwarf before 20160923 allows remote attackers to cause a denial of service (out-of-bounds write) via a crafted file, related to relocation records.

CVSS 3.1 · 6.5 Medium EPSS 2.9% KEV · Not listed

Vendors

Libdwarf Project

Products

Libdwarf

CVE-2016-5035

libdwarf: Out-of-bounds read in _dwarf_read_line_table_header

The _dwarf_read_line_table_header function in dwarf_line_table_reader.c in libdwarf before 20160923 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted file.

CVSS 3.1 · 6.5 Medium EPSS 2.9% KEV · Not listed

Vendors

Libdwarf Project

Products

Libdwarf

CVE-2016-5036

libdwarf: Out-of-bounds read in dump_block

The dump_block function in print_sections.c in libdwarf before 20160923 allows remote attackers to cause a denial of service (out-of-bounds read) via crafted frame data.

CVSS 3.1 · 7.5 High EPSS 4.4% KEV · Not listed

Vendors

Libdwarf Project

Products

Libdwarf

CVE-2016-5037

libdwarf: Null pointer dereference in _dwarf_load_section

The _dwarf_load_section function in libdwarf before 20160923 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted file.

CVSS 3.1 · 6.5 Medium EPSS 2.9% KEV · Not listed

Vendors

Libdwarf Project

Products

Libdwarf

CVE-2016-5032

libdwarf: Out-of-bounds read in dwarf_get_xu_hash_entry()

The dwarf_get_xu_hash_entry function in libdwarf before 20160923 allows remote attackers to cause a denial of service (crash) via a crafted file.

CVSS 3.1 · 6.5 Medium EPSS 2.9% KEV · Not listed

Vendors

Libdwarf Project

Products

Libdwarf

CVE-2016-5039

libdwarf: Out-of-bounds read in get_attr_value() function

The get_attr_value function in libdwarf before 20160923 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted object with all-bits on.

CVSS 3.1 · 7.5 High EPSS 4.4% KEV · Not listed

Vendors

Libdwarf Project

Products

Libdwarf

CVE-2016-5040

libdwarf: Null pointer dereference in read_area_length()

libdwarf before 20160923 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a large length value in a compilation unit header.

CVSS 3.1 · 7.5 High EPSS 4.3% KEV · Not listed

Vendors

Libdwarf Project

Products

Libdwarf

CVE-2016-5041

libdwarf: Null pointer dereference in _dwarf_file_name_is_full_path()

dwarf_macro5.c in libdwarf before 20160923 allows remote attackers to cause a denial of service (NULL pointer dereference) via a debugging information entry using DWARF5 and without a DW_AT_name.

CVSS 3.1 · 7.5 High EPSS 3.4% KEV · Not listed

Vendors

Libdwarf Project

Products

Libdwarf

CVE-2016-2050

libdwarf: Out-of-bounds write in get_abbrev_array_info

The get_abbrev_array_info function in libdwarf-20151114 allows remote attackers to cause a denial of service (out-of-bounds write) via a crafted elf file.

CVSS 3.1 · 6.5 Medium EPSS 1.5% KEV · Not listed

Vendors

Libdwarf Project

Products

Libdwarf