CVE-2019-14249

概要

参考情報

• securityfocus.com/bid/109380 · Third Party Advisory
• sourceforge.net/p/libdwarf/code/ci/cb7198abde46c2ae29957ad460da6886eaa606ba/tree/libdwarf/dwarf_elf_load_headers.c · Patch
• sourceforge.net/p/libdwarf/code/merge-requests/4 · Patch

libdwarf のその他の脆弱性

• CVE-2024-2002高 7.5A double-free vulnerability was found in libdwarf. In a multiply-corrupted DWARF object, libdwarf may try to dealloc(free) an allocation twi…
• CVE-2020-28163中 6.5libdwarf before 20201201 allows a dwarf_print_lines.c NULL pointer dereference and application crash via a DWARF5 line-table header that has…
• CVE-2020-27545中 6.5libdwarf before 20201017 has a one-byte out-of-bounds read because of an invalid pointer dereference via an invalid line table in a crafted …
• CVE-2022-39170高 8.8libdwarf 0.4.1 has a double free in _dwarf_exec_frame_instr in dwarf_frame.c.
• CVE-2022-34299高 8.1There is a heap-based buffer over-read in libdwarf 0.4.0. This issue is related to dwarf_global_formref_b.