libdwarf 0.4.0 has a heap-based buffer over-read in dwarfcheckstringvalid in dwarf_util.c.
[
{
"id": "CVE-2022-32200-77371b43",
"signature_version": "v1",
"source": "https://github.com/davea42/libdwarf-code/commit/8151575a6ace77d005ca5bb5d71c1bfdba3f7069",
"target": {
"file": "src/lib/libdwarf/dwarf_global.c",
"function": "_dwarf_internal_get_pubnames_like_data"
},
"deprecated": false,
"signature_type": "Function",
"digest": {
"length": 6497.0,
"function_hash": "180134011860476916741727590627653524462"
}
},
{
"id": "CVE-2022-32200-96e76880",
"signature_version": "v1",
"source": "https://github.com/davea42/libdwarf-code/commit/8151575a6ace77d005ca5bb5d71c1bfdba3f7069",
"target": {
"file": "src/lib/libdwarf/dwarf_global.c"
},
"deprecated": false,
"signature_type": "Line",
"digest": {
"line_hashes": [
"105452472307704943989628825587070833665",
"318010844446550855911117167534947273534",
"232956743512814284022582453262001133788",
"66376023381154250859184221919304176901",
"315282769935730402221788470433923486467",
"334521993224221255669728676640307087683",
"99233554693935238173537459353427327200",
"104030429930485110275811868671859879413",
"93001142976008720083791221038502107346",
"19028682389115033801921731463655431512",
"66652464949448767028211943453364736848",
"289595022467853742479892745732121572232",
"30086007497845496170573473888063801656",
"313679785871146910055858506277493303658",
"108924846109711695785226287105189968234",
"191248088806397029796208288639914013871",
"232795120665924206972521398381405667476",
"326615293463766354548818522539543954245",
"145856008601471662483693570260351725116",
"148410663626131732622167948584749532227",
"70206371186490335491615876815479259072",
"280450742140493662865735614323153289325",
"120033726953093145825595891087998670718",
"166589602757590722227781022336663464585",
"23646741518148293911789250102547666370",
"258083991025931596541238964486816693366",
"183654469208859632018114676421777959121",
"4231038119223413661969814379532751690"
],
"threshold": 0.9
}
}
]