CVE-2020-28163 libdwarf before 20201201 allows a dwarf_print_lines.c NULL pointer dereference and application crash via a DWARF5 line

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Multiple CVEs Discovered in libdwarf Affecting Various Versions Three vulnerabilities in the libdwarf library have been reported, affecting versions prior to specific release dates. CVE-2020-28163 allows NULL pointer dereference, CVE-2019-14249 involves header loading issues, and CVE-2016-8681 enables denial of service through out-of-bounds read. These vulnerabilities could impact applications relying on the affected library versions. 3 sources 41