CVE Feed

    Dashboard / CVE / CVE-2026-116732

    CVE-2026-116732

    libdwarf through 2.3.3 contains a heap out-of-bounds read vulnerability in dwarf_debug_addr_table() that omits the table starting offset when validating .debug_addr unit length. Attackers can supply a crafted object file with a non-zero offset table, causing dwarf_debug_addr_by_index() to read past the heap buffer, disclosing adjacent heap bytes or crashing consumers.

    Published:Oct 26, 2026
    Last Modified:Oct 27, 2026
    EPS:Oct 26, 2026
    EPSS Score:0.00131
    CVSS Score:4.4

    Affected Products

    Vendor
    Libdwarf Project
    Product
    Libdwarf

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-125 Out-of-bounds Read

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-540 Overread Buffers

    Related CVEs

    CVE-2024-2002 (CVSS 7.5) — A double-free vulnerability was found in libdwarf. In a multiply-corrupted DWARF object, libdwarf may try to d…
    CVE-2022-39170 (CVSS 8.8) — libdwarf 0.4.1 has a double free in _dwarf_exec_frame_instr in dwarf_frame.c.…
    CVE-2022-34299 (CVSS 8.1) — There is a heap-based buffer over-read in libdwarf 0.4.0. This issue is related to dwarf_global_formref_b.…
    CVE-2022-32200 (CVSS 7.8) — libdwarf 0.4.0 has a heap-based buffer over-read in _dwarf_check_string_valid in dwarf_util.c.…
    CVE-2020-28163 (CVSS 6.5) — libdwarf before 20201201 allows a dwarf_print_lines.c NULL pointer dereference and application crash via a DWA…
    CVE-2020-27545 (CVSS 6.5) — libdwarf before 20201017 has a one-byte out-of-bounds read because of an invalid pointer dereference via an in…
    CVE-2019-14249 (CVSS 6.5) — dwarf_elf_load_headers.c in libdwarf before 2019-07-05 allows attackers to cause a denial of service (division…
    CVE-2017-9998 (CVSS 6.5) — The _dwarf_decode_s_leb128_chk function in dwarf_leb.c in libdwarf through 2017-06-28 allows remote attackers …
    CVE-2017-9055 (CVSS 9.8) — An issue, also known as DW201703-001, was discovered in libdwarf 2017-03-21. In dwarf_formsdata() a few data t…
    CVE-2017-9054 (CVSS 9.8) — An issue, also known as DW201703-002, was discovered in libdwarf 2017-03-21. In _dwarf_decode_s_leb128_chk() a…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High