CVE-2016-9480

CVE-2016-9480 affects libdwarf, specifically the dwarf_util.c path, where a heap-based over-read vulnerability in a malformed DWARF file can lead to information disclosure or a denial of service. The issue is described as a Heap Buffer Over-read (DW201611-006) and is referenced in upstream adviso...

CVE-2016-2091

The CVE-2016-2091 vulnerability affects libdwarf, specifically the dwarf_read_cie_fde_prefix function in dwarf_frame2.c. A crafted ELF object file can trigger a denial of service via an out-of-bounds read. Public disclosures in connected sources confirm this issue within libdwarf and note multipl...