CVE-2024-2002

· HIGHAnalyzed

← All CVEs

CVSS v3.1

7.5

EPSS

1.09%

Published

Mar 18, 2024

Modified

Apr 9, 2025

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

A double-free vulnerability was found in libdwarf. In a multiply-corrupted DWARF object, libdwarf may try to dealloc(free) an allocation twice, potentially causing unpredictable and various results.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weaknesses (CWE)

CWE-415

Affected Products (4)

libdwarf_project · libdwarf (up to 0.9.2)vulnerable

redhat · enterprise_linuxvulnerable

fedoraproject · fedoravulnerable

References (7)

https://access.redhat.com/security/cve/CVE-2024-2002

Third Party Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=2267700

Issue Tracking

https://github.com/davea42/libdwarf-code/blob/main/bugxml/data.txt

Third Party Advisory

https://access.redhat.com/security/cve/CVE-2024-2002

Third Party Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=2267700

Issue Tracking

https://github.com/davea42/libdwarf-code/blob/main/bugxml/data.txt

Third Party Advisory

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZGPVLSPIXR32J6FOAFTTIMYTUUXJICGW/

Mailing List

KEV Catalog EPSS Scores Vendors All CVEs