threat
engine
.sh
Back
·
··:··
Home
/
Product
/
libdwarf project libdwarf
Product
libdwarf project libdwarf
45 known vulnerabilities across versions
Vulnerabilities are listed by affected version. Select any CVE for the full briefing and its intelligence graph.
Sort
Newest first
Oldest first
Highest CVSS
Lowest CVSS
Min CVSS
Any
4.0+
7.0+ (High)
9.0+ (Critical)
Published since
Reset
CVE-2024-2002
>= 0.1.0 and < 0.9.2
A double-free vulnerability was found in libdwarf. In a multiply-corrupted DWARF object, libdwarf may try to dealloc(free) an allo
7.5
HIGH
CVE-2020-28163
< 2020-12-01
libdwarf before 20201201 allows a dwarf_print_lines.c NULL pointer dereference and application crash via a DWARF5 line-table heade
6.5
MEDIUM
CVE-2020-27545
< 2020-10-17
libdwarf before 20201017 has a one-byte out-of-bounds read because of an invalid pointer dereference via an invalid line table in
6.5
MEDIUM
CVE-2022-39170
all versions
libdwarf 0.4.1 has a double free in _dwarf_exec_frame_instr in dwarf_frame.c.
8.8
HIGH
CVE-2022-34299
all versions
There is a heap-based buffer over-read in libdwarf 0.4.0. This issue is related to dwarf_global_formref_b.
8.1
HIGH
CVE-2022-32200
all versions
libdwarf 0.4.0 has a heap-based buffer over-read in _dwarf_check_string_valid in dwarf_util.c.
7.8
HIGH
CVE-2019-14249
< 2019-07-05
dwarf_elf_load_headers.c in libdwarf before 2019-07-05 allows attackers to cause a denial of service (division by zero) via an ELF
6.5
MEDIUM
CVE-2014-9482
>= 2013-01-26 and <= 2014-08-05
Use-after-free vulnerability in dwarfdump in libdwarf 20130126 through 20140805 might allow remote attackers to cause a denial of
6.5
MEDIUM
CVE-2017-9998
>= 1999-12-14 and <= 2017-06-28
The _dwarf_decode_s_leb128_chk function in dwarf_leb.c in libdwarf through 2017-06-28 allows remote attackers to cause a denial of
6.5
MEDIUM
CVE-2015-8538
>= 1999-12-14 and <= 2015-11-14
dwarf_leb.c in libdwarf allows attackers to cause a denial of service (SIGSEGV).
6.5
MEDIUM
CVE-2017-9055
all versions
An issue, also known as DW201703-001, was discovered in libdwarf 2017-03-21. In dwarf_formsdata() a few data types were not checke
9.8
CRITICAL
CVE-2017-9054
all versions
An issue, also known as DW201703-002, was discovered in libdwarf 2017-03-21. In _dwarf_decode_s_leb128_chk() a byte pointer was de
9.8
CRITICAL
CVE-2017-9053
all versions
An issue, also known as DW201703-005, was discovered in libdwarf 2017-03-21. A heap-based buffer over-read in _dwarf_read_loc_expr
9.1
CRITICAL
CVE-2017-9052
all versions
An issue, also known as DW201703-006, was discovered in libdwarf 2017-03-21. A heap-based buffer over-read in dwarf_formsdata() is
9.8
CRITICAL
CVE-2016-5041
>= 1999-12-14 and < 2016-09-23
dwarf_macro5.c in libdwarf before 20160923 allows remote attackers to cause a denial of service (NULL pointer dereference) via a d
7.5
HIGH
CVE-2016-9276
>= 1999-12-14 and < 2016-11-24
The dwarf_get_aranges_list function in dwarf_arrange.c in Libdwarf before 20161124 allows remote attackers to cause a denial of se
7.5
HIGH
CVE-2016-9275
>= 1999-12-14 and < 2016-11-24
Heap-based buffer overflow in the _dwarf_skim_forms function in libdwarf/dwarf_macro5.c in Libdwarf before 20161124 allows remote
7.5
HIGH
CVE-2016-9558
>= 1999-12-14 and < 2016-11-24
(1) libdwarf/dwarf_leb.c and (2) dwarfdump/print_frames.c in libdwarf before 20161124 allow remote attackers to have unspecified i
9.8
CRITICAL
CVE-2016-5027
all versions
dwarf_form.c in libdwarf 20160115 allows remote attackers to cause a denial of service (crash) via a crafted elf file.
5.5
MEDIUM
CVE-2016-7511
all versions
Integer overflow in the dwarf_die_deliv.c in libdwarf 20160613 allows remote attackers to cause a denial of service (crash) via a
5.5
MEDIUM
CVE-2016-7510
>= 1999-12-14 and < 2016-09-23
The read_line_table_program function in dwarf_line_table_reader_common.c in libdwarf before 20160923 allows remote attackers to ca
6.5
MEDIUM
CVE-2016-5044
>= 1999-12-14 and < 2016-09-23
The WRITE_UNALIGNED function in dwarf_elf_access.c in libdwarf before 20160923 allows remote attackers to cause a denial of servic
7.5
HIGH
CVE-2016-5043
>= 1999-12-14 and < 2016-09-23
The dwarf_dealloc function in libdwarf before 20160923 allows remote attackers to cause a denial of service (out-of-bounds read an
7.5
HIGH
CVE-2016-5042
>= 1999-12-14 and < 2016-09-23
The dwarf_get_aranges_list function in libdwarf before 20160923 allows remote attackers to cause a denial of service (infinite loo
7.5
HIGH
CVE-2016-5040
>= 1999-12-14 and < 2016-09-23
libdwarf before 20160923 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a large length va
7.5
HIGH
CVE-2016-5039
>= 1999-12-14 and < 2016-09-23
The get_attr_value function in libdwarf before 20160923 allows remote attackers to cause a denial of service (out-of-bounds read)
7.5
HIGH
CVE-2016-5038
>= 1999-12-14 and < 2016-09-23
The dwarf_get_macro_startend_file function in dwarf_macro5.c in libdwarf before 20160923 allows remote attackers to cause a denial
7.5
HIGH
CVE-2016-5037
>= 1999-12-14 and < 2016-09-23
The _dwarf_load_section function in libdwarf before 20160923 allows remote attackers to cause a denial of service (NULL pointer de
6.5
MEDIUM
CVE-2016-5036
>= 1999-12-14 and < 2016-09-23
The dump_block function in print_sections.c in libdwarf before 20160923 allows remote attackers to cause a denial of service (out-
7.5
HIGH
CVE-2016-5035
>= 1999-12-14 and < 2016-09-23
The _dwarf_read_line_table_header function in dwarf_line_table_reader.c in libdwarf before 20160923 allows remote attackers to cau
6.5
MEDIUM
CVE-2016-5034
>= 1999-12-14 and < 2016-09-23
dwarf_elf_access.c in libdwarf before 20160923 allows remote attackers to cause a denial of service (out-of-bounds write) via a cr
6.5
MEDIUM
CVE-2016-5033
>= 1999-12-14 and < 2016-09-23
The print_exprloc_content function in libdwarf before 20160923 allows remote attackers to cause a denial of service (out-of-bounds
6.5
MEDIUM
CVE-2016-5032
>= 1999-12-14 and < 2016-09-23
The dwarf_get_xu_hash_entry function in libdwarf before 20160923 allows remote attackers to cause a denial of service (crash) via
6.5
MEDIUM
CVE-2016-5031
>= 1999-12-14 and < 2016-09-23
The print_frame_inst_bytes function in libdwarf before 20160923 allows remote attackers to cause a denial of service (out-of-bound
5.5
MEDIUM
CVE-2016-5030
>= 1999-12-14 and < 2016-09-23
The _dwarf_calculate_info_section_end_ptr function in libdwarf before 20160923 allows remote attackers to cause a denial of servic
6.5
MEDIUM
CVE-2016-5029
>= 1999-12-14 and < 2016-09-23
The create_fullest_file_path function in libdwarf before 20160923 allows remote attackers to cause a denial of service (NULL point
6.5
MEDIUM
CVE-2016-5028
>= 1999-12-14 and < 2016-09-23
The print_frame_inst_bytes function in libdwarf before 20160923 allows remote attackers to cause a denial of service (NULL pointer
6.5
MEDIUM
CVE-2016-8681
<= 2016-10-01
The _dwarf_get_abbrev_for_code function in dwarf_util.c in libdwarf 20161001 and earlier allows remote attackers to cause a denial
5.5
MEDIUM
CVE-2016-8680
>= 1999-12-14 and <= 2016-10-01
The _dwarf_get_abbrev_for_code function in dwarf_util.c in libdwarf 20161001 and earlier allows remote attackers to cause a denial
6.5
MEDIUM
CVE-2016-8679
>= 1999-12-14 and < 2016-11-24
The _dwarf_get_size_of_val function in libdwarf/dwarf_util.c in Libdwarf before 20161124 allows remote attackers to cause a denial
6.5
MEDIUM
CVE-2015-8750
>= 1999-12-14 and <= 2015-11-14
libdwarf 20151114 and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a debu
6.5
MEDIUM
CVE-2016-2050
all versions
The get_abbrev_array_info function in libdwarf-20151114 allows remote attackers to cause a denial of service (out-of-bounds write)
6.5
MEDIUM
CVE-2016-7410
all versions
The _dwarf_read_loc_section function in dwarf_loc.c in libdwarf 20160613 allows attackers to cause a denial of service (buffer ove
5.5
MEDIUM
CVE-2016-9480
all versions
libdwarf 2016-10-21 allows context-dependent attackers to obtain sensitive information or cause a denial of service by using the "
9.1
CRITICAL
CVE-2016-2091
all versions
The dwarf_read_cie_fde_prefix function in dwarf_frame2.c in libdwarf 20151114 allows attackers to cause a denial of service (out-o
3.3
LOW
Vulnerabilities
CISA KEV catalog
CWE weaknesses
CAPEC attack patterns
Package vulnerabilities
Threat intelligence
Threat actors
Tools & malware
ATT&CK techniques
IOCs
Detection & defense
Sigma rules
YARA rules
Atomic Red Team tests
D3FEND countermeasures
Compliance
NIST 800-53
ISO 27001:2022
SOC 2 TSC
PCI-DSS v4.0
CIS Controls v8.1
About
All capabilities
Live statistics
Data sources
Privacy policy
Terms of service
threatengine.sh · Open-source threat intelligence platform · 100+ authoritative sources · Every fact traces to its origin