CVE-2016-9480
CriticalSummary
libdwarf version from October 21, 2016 allows context-dependent attackers to obtain sensitive information or cause a denial of service by using the 'malformed dwarf file' approach, related to a 'Heap Buffer Over-read' issue affecting the dwarf_util.c component.
Risk Assessment
Organizations may be exposed to sensitive data leaks or service outages, which can lead to serious operational consequences.
Recommendation
It is recommended to update libdwarf to the latest version to mitigate the risks associated with this vulnerability.
Original NVD description (English source)
libdwarf 2016-10-21 allows context-dependent attackers to obtain sensitive information or cause a denial of service by using the "malformed dwarf file" approach, related to a "Heap Buffer Over-read" issue affecting the dwarf_util.c component, aka DW201611-006.