← All advisories

High severity8.1NVD Advisory· Published Jun 23, 2022· Updated Jun 17, 2026

CVE-2022-34299

CVE-2022-34299

Description

There is a heap-based buffer over-read in libdwarf 0.4.0. This issue is related to dwarf_global_formref_b.

Affected products

11

Libdwarf Project/Libdwarf2 versions
cpe:2.3:a:libdwarf_project:libdwarf:0.4.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:libdwarf_project:libdwarf:0.4.0:*:*:*:*:*:*:*
- (no CPE)range: <=0.4.0
libdwarf/libdwarfdescription
Davea42/Libdwarf Codellm-fuzzy
Range: <=0.4.0
osv-coords7 versions
pkg:deb/ubuntu/dwarfutils@20120410-2+deb7u2build0.16.04.1?arch=source&distro=esm-apps/xenial pkg:deb/ubuntu/dwarfutils@20180129-1?arch=source&distro=esm-apps/bionic pkg:deb/ubuntu/dwarfutils@20200114-1?arch=source&distro=esm-apps/focal pkg:deb/ubuntu/dwarfutils@20210528-1?arch=source&distro=jammy pkg:deb/ubuntu/dwarfutils@20210528-1build2?arch=source&distro=noble pkg:deb/ubuntu/dwarfutils@20210528-1build2?arch=source&distro=oracular pkg:deb/ubuntu/dwarfutils@20210528-1build2?arch=source&distro=plucky
>= 0+ 6 more
- (no CPE)range: >= 0
- (no CPE)range: >= 0
- (no CPE)range: >= 0
- (no CPE)range: >= 0
- (no CPE)range: >= 0
- (no CPE)range: >= 0
- (no CPE)range: >= 0

Patches

Vulnerability mechanics

References

2

github.com/davea42/libdwarf-code/commit/7ef09e1fc9ba07653dd078edb2408631c7969162nvdPatchThird Party Advisory
github.com/davea42/libdwarf-code/issues/119nvdExploitIssue TrackingThird Party Advisory

News mentions

0

No linked articles in our index yet.