{"id":"CVE-2022-34299","details":"There is a heap-based buffer over-read in libdwarf 0.4.0. This issue is related to dwarf_global_formref_b.","modified":"2026-08-12T13:01:13.260201Z","published":"2022-06-22T14:35:21Z","related":["openSUSE-SU-2024:12509-1"],"database_specific":{"cna_assigner":"mitre","osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/34xxx/CVE-2022-34299.json"},"references":[{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/34xxx/CVE-2022-34299.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-34299"},{"type":"REPORT","url":"https://github.com/davea42/libdwarf-code/issues/119"},{"type":"FIX","url":"https://github.com/davea42/libdwarf-code/commit/7ef09e1fc9ba07653dd078edb2408631c7969162"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/davea42/libdwarf-code","events":[{"introduced":"6993512b8c1ebb1a52b91def4557d67eba79cfa4"},{"fixed":"7ef09e1fc9ba07653dd078edb2408631c7969162"}],"database_specific":{"extracted_events":[{"introduced":"0.4.0"},{"last_affected":"0.4.0"}],"source":["CPE_STRING","REFERENCES"],"cpe":"cpe:2.3:a:libdwarf_project:libdwarf:0.4.0:*:*:*:*:*:*:*"}}],"versions":["0.4.0","v0.4.0","libdwarf-0.4.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-34299.json","vanir_signatures_modified":"2026-08-12T13:01:13Z","vanir_signatures":[{"signature_version":"v1","source":"https://github.com/davea42/libdwarf-code/commit/7ef09e1fc9ba07653dd078edb2408631c7969162","target":{"function":"dwarf_global_formref_b","file":"src/lib/libdwarf/dwarf_form.c"},"deprecated":false,"digest":{"length":3791,"function_hash":"78862220269873398469667286450600140818"},"id":"CVE-2022-34299-40819a14","signature_type":"Function"},{"signature_type":"Line","signature_version":"v1","source":"https://github.com/davea42/libdwarf-code/commit/7ef09e1fc9ba07653dd078edb2408631c7969162","target":{"file":"src/lib/libdwarf/dwarf_form.c"},"deprecated":false,"digest":{"line_hashes":["258716398145294568082527531509394198831","163769783715992938486691183309269823418","339270606956719756792502860832076083990","159490849568476158364029038457075306881","315320428459480269092930358133969609620","265780766283395225142527022282432068556"],"threshold":0.9},"id":"CVE-2022-34299-6d88f717"}]}}],"schema_version":"1.9.0"}