{"id":"CVE-2022-34299","details":"There is a heap-based buffer over-read in libdwarf 0.4.0. This issue is related to dwarf_global_formref_b.","modified":"2026-10-28T10:26:56.124147303Z","published":"2022-06-22T14:35:21Z","related":["openSUSE-SU-2024:12509-1"],"database_specific":{"cna_assigner":"mitre","osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/34xxx/CVE-2022-34299.json"},"references":[{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/34xxx/CVE-2022-34299.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-34299"},{"type":"REPORT","url":"https://github.com/davea42/libdwarf-code/issues/119"},{"type":"FIX","url":"https://github.com/davea42/libdwarf-code/commit/7ef09e1fc9ba07653dd078edb2408631c7969162"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/davea42/libdwarf-code","events":[{"introduced":"6993512b8c1ebb1a52b91def4557d67eba79cfa4"},{"fixed":"7ef09e1fc9ba07653dd078edb2408631c7969162"}],"database_specific":{"extracted_events":[{"range":[{"introduced":"0.4.0"},{"last_affected":"0.4.0"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:libdwarf_project:libdwarf:0.4.0:*:*:*:*:*:*:*"},{"range":[{"fixed":"7ef09e1fc9ba07653dd078edb2408631c7969162"}],"source":"REFERENCES_COMMIT"}]}}],"versions":["0.4.0","v0.4.0","libdwarf-0.4.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-34299.json","vanir_signatures":[{"signature_version":"v1","source":"https://github.com/davea42/libdwarf-code/commit/7ef09e1fc9ba07653dd078edb2408631c7969162","target":{"file":"src/lib/libdwarf/dwarf_form.c","function":"dwarf_global_formref_b"},"deprecated":false,"digest":{"function_hash":"78862220269873398469667286450600140818","length":3791},"id":"CVE-2022-34299-40819a14","signature_type":"Function"},{"signature_type":"Line","signature_version":"v1","source":"https://github.com/davea42/libdwarf-code/commit/7ef09e1fc9ba07653dd078edb2408631c7969162","target":{"file":"src/lib/libdwarf/dwarf_form.c"},"deprecated":false,"digest":{"line_hashes":["258716398145294568082527531509394198831","163769783715992938486691183309269823418","339270606956719756792502860832076083990","159490849568476158364029038457075306881","315320428459480269092930358133969609620","265780766283395225142527022282432068556"],"threshold":0.9},"id":"CVE-2022-34299-6d88f717"}],"vanir_signatures_modified":"2026-10-28T10:26:56Z"}}],"schema_version":"1.9.2"}