OSV-2026-54

See a problem?
Import Source
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/libdwarf/OSV-2026-54.yaml
JSON Data
https://api.osv.dev/v1/vulns/OSV-2026-54
Published
2026-01-15T00:17:17.477757Z
Modified
2026-01-15T00:17:17.478056Z
Summary
Heap-use-after-free in _dwarf_exec_frame_instr
Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=475563464

Crash type: Heap-use-after-free READ 8
Crash state:
_dwarf_exec_frame_instr
_dwarf_get_fde_info_for_a_pc_row
dwarf_get_fde_info_for_all_regs3_b
References

Affected packages

OSS-Fuzz / libdwarf

Package

Name
libdwarf
Purl
pkg:generic/libdwarf

Affected ranges

Type
GIT
Repo
https://github.com/davea42/libdwarf-code
Events
Introduced
a0b85ccca9b9ad0d1ddb303372b300e9029342dd
Fixed
eab3c42416fb5c14c1f5ba60294642ca34599b11

Affected versions

libdwarf-2.*
libdwarf-2.3.0
v2.*
v2.3.0

Ecosystem specific 

{
    "severity": "HIGH"
}

Database specific

introduced_range 
"0ed97228bc984d368249a1575f10a59b45cdb606:17ecf1c46d1047fb43e876371cc4bffc110729af"
fixed_range 
"63c286fa066879eb535bd9d72c48e924bb06790f:eab3c42416fb5c14c1f5ba60294642ca34599b11"
source 
"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/libdwarf/OSV-2026-54.yaml"