CVE-2022-32200

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

libdwarf 0.4.0 has a heap-based buffer over-read in _dwarf_check_string_valid in dwarf_util.c.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-125

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://github.com/davea42/libdwarf-code/commit/8151575a6ace77d005ca5bb5d71c1bfdba3f7069Patch, Third Party Advisory
https://github.com/davea42/libdwarf-code/issues/116Exploit, Issue Tracking, Third Party Advisory
https://www.prevanders.net/dwarfbug.htmlProduct, Third Party Advisory
https://github.com/davea42/libdwarf-code/commit/8151575a6ace77d005ca5bb5d71c1bfdba3f7069Patch, Third Party Advisory
https://github.com/davea42/libdwarf-code/issues/116Exploit, Issue Tracking, Third Party Advisory
https://www.prevanders.net/dwarfbug.htmlProduct, Third Party Advisory

Timeline

Published: Jun 2, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-322015.5In libjpeg 1.63, there is a NULL pointer dereference in Component::SubXOf in component.hpp.CVE-2022-322025.5In libjpeg 1.63, there is a NULL pointer dereference in LineBuffer::FetchRegion in linebuffer.cpp.CVE-2022-322039.8There is a command injection vulnerability in Huawei terminal printer product. Successful exploitation could result in the highest privilege CVE-2022-322047.5There is an improper input verification vulnerability in Huawei printer product. Successful exploitation of this vulnerability may cause ser CVE-2022-322054.3A malicious server can serve excessive amounts of `Set-Cookie:` headers in a HTTP response to curl and curl < 7.84.0 stores all of them. A s CVE-2022-322066.5curl < 7.84.0 supports "chained" HTTP compression algorithms, meaning that a serverresponse can be compressed multiple times and potentially CVE-2022-322079.8When curl < 7.84.0 saves cookies, alt-svc and hsts data to local files, it makes the operation atomic by finalizing the operation with a ren CVE-2022-322085.9When curl < 7.84.0 does FTP transfers secured by krb5, it handles message verification failures wrongly. This flaw makes it possible for a M CVE-2022-322096.1# Possible XSS Vulnerability in Rails::Html::SanitizerThere is a possible XSS vulnerability with certain configurations of Rails::Html::Sani CVE-2022-32218.8Cross-Site Request Forgery (CSRF) in GitHub repository ikus060/rdiffweb prior to 2.4.3.CVE-2022-322106.5`Undici.ProxyAgent` never verifies the remote server's certificate, and always exposes all request & response data to the proxy. This unexpe CVE-2022-322118.8A SQL injection vulnerability exists in Rocket.Chat <v3.18.6, <v4.4.4 and <v4.7.3 which can allow an attacker to retrieve a reset password t