CVE-2026-116732
libdwarf through 2.3.3 Heap Out-of-Bounds Read via dwarf_debug_addr_table
CVSS Score
4.4
EPSS Score
0.0%
EPSS Percentile
0th
libdwarf through 2.3.3 contains a heap out-of-bounds read vulnerability in dwarf_debug_addr_table() that omits the table starting offset when validating .debug_addr unit length. Attackers can supply a crafted object file with a non-zero offset table, causing dwarf_debug_addr_by_index() to read past the heap buffer, disclosing adjacent heap bytes or crashing consumers.
| CWE | CWE-125 |
| Vendor | davea42 |
| Product | libdwarf |
| Published | Oct 26, 2026 |
Stay Ahead of the Next One
Get instant alerts for davea42 libdwarf
Be the first to know when new medium vulnerabilities affecting davea42 libdwarf are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L Attack Vector
Local
Attack Complexity
Low
Privileges Required
None
User Interaction
Required
Scope
Unchanged
Confidentiality
Low
Integrity
None
Availability
Low
Affected Versions
davea42 / libdwarf
0 ≤ 2.3.3
References
github.com: https://github.com/davea42/libdwarf-code/issues/336 github.com: https://github.com/davea42/libdwarf-code github.com: https://github.com/davea42/libdwarf-code/commit/71f04013ddc2a3c88b9e25a4162ee2824741b593 github.com: https://github.com/davea42/libdwarf-code/blob/v2.3.3/src/lib/libdwarf/dwarf_debugaddr.c#L175-L216 hackmd.io: https://hackmd.io/@haindpwn/libdwarf-debug-addr-table-section-offset-oob-read vulncheck.com: https://www.vulncheck.com/advisories/libdwarf-through-2.3.3-heap-out-of-bounds-read-via-dwarf-debug-addr-table
Credits
HaiND from the Post and Telecommunication Institute of Technology