libdwarf vulnerabilities

CVEs whose affected-version data names the libdwarf package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-116732Medium· 4.4

2d ago

libdwarf through 2.3.3 Heap Out-of-Bounds Read via dwarf_debug_addr_table

libdwarf through 2.3.3 contains a heap out-of-bounds read vulnerability in dwarf_debug_addr_table() that omits the table starting offset when validating .debug_addr unit length. Attackers can supply a crafted object file with a non-zero …

▾ Sunlitdavea42 · libdwarfEPSS 0.13%via CVEORG