Approved changes feed: RSS · Atom

cpe:2.3:a:libdwarf_project:libdwarf:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorLibdwarf Project (3c9f6d59-b696-5097-bab8-0ff5398a157d)
ProductLibdwarf (745ec8fa-61a3-5b8a-ad14-9f6d8c88c1db)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/davea42/libdwarf-code purl2cpe 2026-06-01 10:11:13.650574
pkg:sourceforge/libdwarf purl2cpe 2026-06-01 10:11:13.650576

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-116732 vulnerable 2026-11-03 10:15:22.048977 libdwarf through 2.3.3 Heap Out-of-Bounds Read via dwarf_debug_addr_table
MEDIUM (4.4)
libdwarf through 2.3.3 contains a heap out-of-bounds read vulnerability in dwarf_debug_addr_table() that omits the table starting offset when validating .debug_addr unit length. Attackers can supply a crafted object file with a non-zero offset table, causing dwarf_debug_addr_by_index() to read past the heap buffer, disclosing adjacent heap bytes or crashing consumers.
Published: 2026-10-26T21:52:33.622Z
Updated: 2026-10-31T01:59:17.377Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-2002 vulnerable 2026-06-08 06:33:30.067613 Libdwarf: crashes randomly on fuzzed object
HIGH (7.5)
A double-free vulnerability was found in libdwarf. In a multiply-corrupted DWARF object, libdwarf may try to dealloc(free) an allocation twice, potentially causing unpredictable and various results.
Published: 2024-03-18T12:26:31.386Z
Updated: 2026-11-05T11:44:13.594Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-28163 vulnerable 2026-06-08 05:23:53.822706 Details available
libdwarf before 20201201 allows a dwarf_print_lines.c NULL pointer dereference and application crash via a DWARF5 line-table header that has an invalid FORM for a pathname.
Published: 2023-04-15T00:00:00.000Z
Updated: 2025-02-06T16:20:12.542Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-27545 vulnerable 2026-06-08 05:23:52.776826 Details available
libdwarf before 20201017 has a one-byte out-of-bounds read because of an invalid pointer dereference via an invalid line table in a crafted object.
Published: 2023-04-15T00:00:00.000Z
Updated: 2025-02-06T16:23:01.097Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-14249 vulnerable 2026-06-08 05:12:54.332533 Details available
dwarf_elf_load_headers.c in libdwarf before 2019-07-05 allows attackers to cause a denial of service (division by zero) via an ELF file with a zero-size section group (SHT_GROUP), as demonstrated by dwarfdump.
Published: 2019-07-24T03:30:18.000Z
Updated: 2024-08-05T00:12:43.346Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-9998 vulnerable 2026-06-08 05:10:20.233671 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9558 vulnerable 2026-06-08 05:08:24.023121 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9276 vulnerable 2026-06-08 05:08:23.202063 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-9275 vulnerable 2026-06-08 05:08:23.201568 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-8681 vulnerable 2026-06-08 05:08:14.613237 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-8680 vulnerable 2026-06-08 05:08:14.612888 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-8679 vulnerable 2026-06-08 05:08:14.612502 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-7510 vulnerable 2026-06-08 05:08:12.942747 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-5044 vulnerable 2026-06-08 05:07:56.196051 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-5043 vulnerable 2026-06-08 05:07:56.195650 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-5042 vulnerable 2026-06-08 05:07:56.195323 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-5041 vulnerable 2026-06-08 05:07:56.194966 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-5040 vulnerable 2026-06-08 05:07:56.194546 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-5039 vulnerable 2026-06-08 05:07:56.194103 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-5038 vulnerable 2026-06-08 05:07:56.193772 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-5037 vulnerable 2026-06-08 05:07:56.193442 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-5036 vulnerable 2026-06-08 05:07:56.193115 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-5035 vulnerable 2026-06-08 05:07:56.192673 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-5034 vulnerable 2026-06-08 05:07:56.192248 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-5033 vulnerable 2026-06-08 05:07:56.191904 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-5032 vulnerable 2026-06-08 05:07:56.191375 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-5031 vulnerable 2026-06-08 05:07:56.190940 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-5030 vulnerable 2026-06-08 05:07:56.190504 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-5029 vulnerable 2026-06-08 05:07:56.190006 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-5028 vulnerable 2026-06-08 05:07:56.189560 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-8750 vulnerable 2026-06-08 05:07:04.800711 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-8538 vulnerable 2026-06-08 05:07:04.287886 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-9482 vulnerable 2026-06-08 05:06:11.917923 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.