Skip to content

Libdwarf Project · product

Libdwarf

44 CVEs

Every dot is a CVE in what this vendor ships; the named ones are the most at risk.

Every one of the 44 is a mark on the map. Named now: 1 to 26, most at risk first.

  1. (1) libdwarf/dwarf_leb.c and (2) dwarfdump/print_frames.c in libdwarf before 20161124 allow remote attackers to have unspecified impact via a crafted bit pattern in a signed leb n…CVE-2016-9558Libdwarf Project · 5.0% likely

    CWE-190

  2. The get_attr_value function in libdwarf before 20160923 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted object with all-bits on.CVE-2016-5039Libdwarf Project · 4.4% likely

    CWE-125

  3. The dwarf_get_macro_startend_file function in dwarf_macro5.c in libdwarf before 20160923 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted st…CVE-2016-5038Libdwarf Project · 4.4% likely

    CWE-125

  4. The dump_block function in print_sections.c in libdwarf before 20160923 allows remote attackers to cause a denial of service (out-of-bounds read) via crafted frame data.CVE-2016-5036Libdwarf Project · 4.4% likely

    CWE-125

  5. The WRITE_UNALIGNED function in dwarf_elf_access.c in libdwarf before 20160923 allows remote attackers to cause a denial of service (out-of-bounds write and crash) via a crafted D…CVE-2016-5044Libdwarf Project · 4.3% likely

    CWE-787

  6. The dwarf_dealloc function in libdwarf before 20160923 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a crafted DWARF section.CVE-2016-5043Libdwarf Project · 4.3% likely

    CWE-125

  7. libdwarf before 20160923 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a large length value in a compilation unit header.CVE-2016-5040Libdwarf Project · 4.3% likely

    CWE-125

  8. Heap-based buffer overflow in the _dwarf_skim_forms function in libdwarf/dwarf_macro5.c in Libdwarf before 20161124 allows remote attackers to cause a denial of service (out-of-bo…CVE-2016-9275Libdwarf Project · 4.2% likely

    CWE-787

  9. The dwarf_get_aranges_list function in libdwarf before 20160923 allows remote attackers to cause a denial of service (infinite loop and crash) via a crafted DWARF section.CVE-2016-5042Libdwarf Project · 4.1% likely

    CWE-835

  10. The dwarf_get_aranges_list function in dwarf_arrange.c in Libdwarf before 20161124 allows remote attackers to cause a denial of service (out-of-bounds read).CVE-2016-9276Libdwarf Project · 4.1% likely

    CWE-125

  11. libdwarf 2016-10-21 allows context-dependent attackers to obtain sensitive information or cause a denial of service by using the "malformed dwarf file" approach, related to a "Hea…CVE-2016-9480Libdwarf Project · 3.6% likely

    CWE-119

  12. dwarf_macro5.c in libdwarf before 20160923 allows remote attackers to cause a denial of service (NULL pointer dereference) via a debugging information entry using DWARF5 and witho…CVE-2016-5041Libdwarf Project · 3.4% likely

    CWE-476

  13. The _dwarf_calculate_info_section_end_ptr function in libdwarf before 20160923 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted file.CVE-2016-5030Libdwarf Project · 2.9% likely

    CWE-476

  14. dwarf_elf_access.c in libdwarf before 20160923 allows remote attackers to cause a denial of service (out-of-bounds write) via a crafted file, related to relocation records.CVE-2016-5034Libdwarf Project · 2.9% likely

    CWE-787

  15. The _dwarf_get_size_of_val function in libdwarf/dwarf_util.c in Libdwarf before 20161124 allows remote attackers to cause a denial of service (out-of-bounds read) by calling the d…CVE-2016-8679Libdwarf Project · 2.9% likely

    CWE-125

  16. The _dwarf_load_section function in libdwarf before 20160923 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted file.CVE-2016-5037Libdwarf Project · 2.9% likely

    CWE-476

  17. The _dwarf_read_line_table_header function in dwarf_line_table_reader.c in libdwarf before 20160923 allows remote attackers to cause a denial of service (out-of-bounds read) via a…CVE-2016-5035Libdwarf Project · 2.9% likely

    CWE-125

  18. The print_exprloc_content function in libdwarf before 20160923 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted file.CVE-2016-5033Libdwarf Project · 2.9% likely

    CWE-125

  19. The dwarf_get_xu_hash_entry function in libdwarf before 20160923 allows remote attackers to cause a denial of service (crash) via a crafted file.CVE-2016-5032Libdwarf Project · 2.9% likely

    CWE-125

  20. The create_fullest_file_path function in libdwarf before 20160923 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted dwarf file.CVE-2016-5029Libdwarf Project · 2.9% likely

    CWE-476

  21. The print_frame_inst_bytes function in libdwarf before 20160923 allows remote attackers to cause a denial of service (NULL pointer dereference) via an object file with empty bss-l…CVE-2016-5028Libdwarf Project · 2.9% likely

    CWE-476

  22. The _dwarf_get_abbrev_for_code function in dwarf_util.c in libdwarf 20161001 and earlier allows remote attackers to cause a denial of service (out-of-bounds read) by calling the d…CVE-2016-8680Libdwarf Project · 2.9% likely

    CWE-125

  23. dwarf_elf_load_headers.c in libdwarf before 2019-07-05 allows attackers to cause a denial of service (division by zero) via an ELF file with a zero-size section group (SHT_GROUP),…CVE-2019-14249Libdwarf Project · 2.7% likely

    CWE-369

  24. An issue, also known as DW201703-006, was discovered in libdwarf 2017-03-21. A heap-based buffer over-read in dwarf_formsdata() is due to a failure to check a pointer for being in…CVE-2017-9052Libdwarf Project · 2.6% likely

    CWE-125

  25. Use-after-free vulnerability in dwarfdump in libdwarf 20130126 through 20140805 might allow remote attackers to cause a denial of service (program crash) via a crafted ELF file.CVE-2014-9482Libdwarf Project · 2.2% likely

    CWE-416

  26. The _dwarf_get_abbrev_for_code function in dwarf_util.c in libdwarf 20161001 and earlier allows remote attackers to cause a denial of service (out-of-bounds read) by calling the d…CVE-2016-8681Libdwarf Project · 2.1% likely

    CWE-125

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-15 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.