A subtle corruption in a DWARF5 line-table header can still bring a debugging toolchain to its knees: CVE-2020-28163 is a null-pointer dereference in libdwarf’s dwarf_print_lines.c that allows a crafted DWARF5 line-table header with an invalid FORM for a pathname to crash applications that...
A double-free flaw in the libdwarf DWARF-processing library — tracked as CVE-2024-2002 — can cause applications that consume malformed DWARF debug data to crash unpredictably, enabling sustained or repeated denial-of-service conditions; the defect was reported in early 2024 and has been...