Every CVE Search/ Get API key

CVE-2024-2002

Libdwarf: crashes randomly on fuzzed object

7.5 HighFix available

A double-free vulnerability was found in libdwarf. In a multiply-corrupted DWARF object, libdwarf may try to dealloc(free) an allocation twice, potentially causing unpredictable and various results.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

1.09%Up 1.0 points since Mar 19, 2024
90%50%10%1%

What each source reports

CVE List Score used 7.5

Libdwarf: crashes randomly on fuzzed object

A double-free vulnerability was found in libdwarf. In a multiply-corrupted DWARF object, libdwarf may try to dealloc(free) an allocation twice, potentially causing unpredictable and various results.

Record
CVE-2024-2002
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-415
Updated
2026-11-02
EUVDEUVD-2024-26972 7.5

A double-free vulnerability was found in libdwarf. In a multiply-corrupted DWARF object, libdwarf may try to dealloc(free) an allocation twice, potentially causing unpredictable and various results.

Record
EUVD-2024-26972
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-v5qg-55pp-x38m 7.5

A double-free vulnerability was found in libdwarf. In a multiply-corrupted DWARF object, libdwarf...

A double-free vulnerability was found in libdwarf. In a multiply-corrupted DWARF object, libdwarf may try to dealloc(free) an allocation twice, potentially causing unpredictable and various results.

Record
GHSA-v5qg-55pp-x38m
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-415
Updated
2026-11-02
NVD 7.5

A double-free vulnerability was found in libdwarf. In a multiply-corrupted DWARF object, libdwarf may try to dealloc(free) an allocation twice, potentially causing unpredictable and various results.

Record
CVE-2024-2002
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-415
Updated
2026-11-02
OSV 7.5

Libdwarf: crashes randomly on fuzzed object

A double-free vulnerability was found in libdwarf. In a multiply-corrupted DWARF object, libdwarf may try to dealloc(free) an allocation twice, potentially causing unpredictable and various results.

Record
CVE-2024-2002
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-415
Updated
2026-11-02
OSVDEBIAN-CVE-2024-2002 7.5

A double-free vulnerability was found in libdwarf. In a multiply-corrupted DWARF object, libdwarf may try to dealloc(free) an allocation twice, potentially causing unpredictable and various results.

Record
DEBIAN-CVE-2024-2002
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
Show 9 moreShow less
OSVOESA-2024-1343 7.5

libdwarf security update

Libdwarf is a library of functions to provide read/write DWARF debugging records.

Security Fix(es):

A double-free vulnerability was found in libdwarf. In a multiply-corrupted DWARF object, libdwarf may try to dealloc(free) an allocation twice, potentially causing unpredictable and various results.(CVE-2024-2002)

Record
OESA-2024-1343
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2024-1419 7.5

libdwarf security update

Libdwarf is a library of functions to provide read/write DWARF debugging records.

Security Fix(es):

A double-free vulnerability was found in libdwarf. In a multiply-corrupted DWARF object, libdwarf may try to dealloc(free) an allocation twice, potentially causing unpredictable and various results.(CVE-2024-2002)

Record
OESA-2024-1419
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2024-1434 7.5

libdwarf security update

Libdwarf is a library of functions to provide read/write DWARF debugging records.

Security Fix(es):

A double-free vulnerability was found in libdwarf. In a multiply-corrupted DWARF object, libdwarf may try to dealloc(free) an allocation twice, potentially causing unpredictable and various results.(CVE-2024-2002)

Record
OESA-2024-1434
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2024-1458 7.5

libdwarf security update

Libdwarf is a library of functions to provide read/write DWARF debugging records.

Security Fix(es):

A double-free vulnerability was found in libdwarf. In a multiply-corrupted DWARF object, libdwarf may try to dealloc(free) an allocation twice, potentially causing unpredictable and various results.(CVE-2024-2002)

Record
OESA-2024-1458
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2024-1459 7.5

libdwarf security update

Libdwarf is a library of functions to provide read/write DWARF debugging records.

Security Fix(es):

A double-free vulnerability was found in libdwarf. In a multiply-corrupted DWARF object, libdwarf may try to dealloc(free) an allocation twice, potentially causing unpredictable and various results.(CVE-2024-2002)

Record
OESA-2024-1459
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2024-1460 7.5

libdwarf security update

Libdwarf is a library of functions to provide read/write DWARF debugging records.

Security Fix(es):

A double-free vulnerability was found in libdwarf. In a multiply-corrupted DWARF object, libdwarf may try to dealloc(free) an allocation twice, potentially causing unpredictable and various results.(CVE-2024-2002)

Record
OESA-2024-1460
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2024-2002 7.5

A double-free vulnerability was found in libdwarf. In a multiply-corrupted DWARF object, libdwarf may try to dealloc(free) an allocation twice, potentially causing unpredictable and various results.

Record
UBUNTU-CVE-2024-2002
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVAZL-35908 No score

CVE-2024-2002 affecting package libdwarf for versions less than 0.9.0-3

A double-free vulnerability was found in libdwarf. In a multiply-corrupted DWARF object, libdwarf may try to dealloc(free) an allocation twice, potentially causing unpredictable and various results.

Record
AZL-35908
Updated
2026-11-02
OSVAZL-42087 No score

CVE-2024-2002 affecting package libdwarf for versions less than 0.9.2-1

A double-free vulnerability was found in libdwarf. In a multiply-corrupted DWARF object, libdwarf may try to dealloc(free) an allocation twice, potentially causing unpredictable and various results.

Record
AZL-42087
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
libdwarf
Azure Linux:2
 before 0.9.0-3
0.9.0-3
libdwarf
Azure Linux:3
 before 0.9.2-1
0.9.2-1
dwarfutils
Debian:12
 All versions, plus listed versions
1:0.11.1-11:0.11.1-1~exp11:0.11.1-1~exp220210528-1
 None known
dwarfutils
Debian:13
 before 1:0.11.1-1
1:0.11.1-1
dwarfutils
Debian:14
 before 1:0.11.1-1
1:0.11.1-1
libdwarf
openEuler:22.03-LTS-SP3
 before 0.9.1-1.oe2203sp3
0.9.1-1.oe2203sp3
libdwarf
openEuler:20.03-LTS-SP4
 before 0.9.1-1.oe2003sp4
0.9.1-1.oe2003sp4
libdwarf
openEuler:22.03-LTS
 before 0.9.1-1.oe2203
0.9.1-1.oe2203
libdwarf
openEuler:22.03-LTS-SP1
 before 0.9.1-1.oe2203sp1
0.9.1-1.oe2203sp1
libdwarf
openEuler:22.03-LTS-SP2
 before 0.9.1-1.oe2203sp2
0.9.1-1.oe2203sp2
libdwarf
openEuler:20.03-LTS-SP1
 before 0.9.1-1.oe1
0.9.1-1.oe1
dwarfutils
Ubuntu:22.04:LTS
 All versions, plus listed versions
20201201-120210528-1
 None known
dwarfutils
Ubuntu:24.04:LTS
 All versions, plus listed versions
20210528-120210528-1build120210528-1build2
 None known

History

History
RecordedChangedSources
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2024-2002 is a high vulnerability (CVSS 7.5) in Libdwarf Project Libdwarf, published March 18, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.09%, the 65th percentile. Fixed in libdwarf 0.9.0-3.

References

Show 14 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open