CVE-2020-28163: Null Pointer Dereference
Published Apr 15, 2023
·Updated
libdwarf before 20201201 allows a dwarfprintlines.c NULL pointer dereference and application crash via a DWARF5 line-table header that has an invalid FORM for a pathname.
Affected Software
3 affected componentsFixes available
Libdwarf Project Libdwarf<2020-12-01
Microsoft azl3 libdwarf 0.9.0-1
Microsoft cbl2 libdwarf 0.9.0
Remediation
Event History
Apr 15, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Apr 16, 2023
Data Sourced
via NVD·12:15 AM
RemedyDescriptionSeverityWeaknessAffected Software
Sep 4, 2025
Data Sourced
via Microsoft·03:22 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2020-28163?
CVE-2020-28163 is classified as a medium severity vulnerability due to the potential for a NULL pointer dereference and application crash.
2
How do I fix CVE-2020-28163?
To fix CVE-2020-28163, update libdwarf to version 2020-12-01 or later.
3
What causes the vulnerability CVE-2020-28163?
CVE-2020-28163 is caused by a NULL pointer dereference when handling a DWARF5 line-table header with an invalid FORM for a pathname.
4
Which versions of libdwarf are affected by CVE-2020-28163?
All versions of libdwarf before 2020-12-01 are affected by CVE-2020-28163.
5
What can happen if CVE-2020-28163 is exploited?
Exploiting CVE-2020-28163 may lead to application crashes, resulting in potential denial of service.