David Anderson

5 exploits Active since Jun 2022
CVE-2020-27545 WRITEUP MEDIUM WRITEUP
libdwarf <20201017 - Memory Corruption
libdwarf before 20201017 has a one-byte out-of-bounds read because of an invalid pointer dereference via an invalid line table in a crafted object.
CVSS 6.5
CVE-2020-28163 WRITEUP MEDIUM WRITEUP
Libdwarf < 2020-12-01 - NULL Pointer Dereference
libdwarf before 20201201 allows a dwarf_print_lines.c NULL pointer dereference and application crash via a DWARF5 line-table header that has an invalid FORM for a pathname.
CVSS 6.5
CVE-2022-32200 WRITEUP HIGH WRITEUP
Libdwarf - Out-of-Bounds Read
libdwarf 0.4.0 has a heap-based buffer over-read in _dwarf_check_string_valid in dwarf_util.c.
CVSS 7.8
CVE-2022-34299 WRITEUP HIGH WRITEUP
Libdwarf - Out-of-Bounds Read
There is a heap-based buffer over-read in libdwarf 0.4.0. This issue is related to dwarf_global_formref_b.
CVSS 8.1
CVE-2022-39170 WRITEUP HIGH WRITEUP
Libdwarf - Double Free
libdwarf 0.4.1 has a double free in _dwarf_exec_frame_instr in dwarf_frame.c.
CVSS 8.8