CVE-2017-9053

An issue, also known as DW201703-005, was discovered in libdwarf 2017-03-21. A heap-based buffer over-read in _dwarf_read_loc_expr_op() is due to a failure to check a pointer for being in bounds (in a few places in this function). This CVE is recorded as CVE-2017-9053. The provided documents desc...

CVE-2017-9055

CVE-2017-9055 affects libdwarf; a heap-based buffer over-read occurs in dwarf_formsdata() due to insufficient bounds checks in certain data types. Documented impact is memory read/read crashes; CVSSv3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H indicates a CRITICAL exposure. The connected sources do no...

CVE-2017-9054

CVE-2017-9054 describes a heap-based buffer over-read in libdwarf (disclosed as DW201703-002). The issue arises in the function _dwarf_decode_s_leb128_chk(), where a byte pointer is dereferenced before bounds checking, enabling reading beyond allocated memory. Affected component is libdwarf (libr...

CVE-2017-9052

CVE-2017-9052 affects libdwarf (2017-03-21 release); a heap-based buffer over-read occurs in dwarf_formsdata() due to missing bounds checks in multiple spots and a dereference risk in dwarf_attr_list(). The issue is triggered by reading beyond allocated buffers, with potential impact to confident...