CVE-2016-9480

CVE-2016-9480 affects libdwarf, specifically the dwarf_util.c path, where a heap-based over-read vulnerability in a malformed DWARF file can lead to information disclosure or a denial of service. The issue is described as a Heap Buffer Over-read (DW201611-006) and is referenced in upstream adviso...

CVE-2017-9053

An issue, also known as DW201703-005, was discovered in libdwarf 2017-03-21. A heap-based buffer over-read in _dwarf_read_loc_expr_op() is due to a failure to check a pointer for being in bounds (in a few places in this function). This CVE is recorded as CVE-2017-9053. The provided documents desc...

CVE-2017-9055

CVE-2017-9055 affects libdwarf; a heap-based buffer over-read occurs in dwarf_formsdata() due to insufficient bounds checks in certain data types. Documented impact is memory read/read crashes; CVSSv3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H indicates a CRITICAL exposure. The connected sources do no...

CVE-2017-9054

CVE-2017-9054 describes a heap-based buffer over-read in libdwarf (disclosed as DW201703-002). The issue arises in the function _dwarf_decode_s_leb128_chk(), where a byte pointer is dereferenced before bounds checking, enabling reading beyond allocated memory. Affected component is libdwarf (libr...

CVE-2016-9558

The CVE-2016-9558 issue affects libdwarf: specifically the code in libdwarf/dwarf_leb.c and dwarfdump/print_frames.c. A crafted bit pattern in a signed leb number can trigger a negation overflow, exposed in libdwarf versions before 20161124. This is described as having unspecified impact for remo...

CVE-2017-9052

CVE-2017-9052 affects libdwarf (2017-03-21 release); a heap-based buffer over-read occurs in dwarf_formsdata() due to missing bounds checks in multiple spots and a dereference risk in dwarf_attr_list(). The issue is triggered by reading beyond allocated buffers, with potential impact to confident...