CVE-2016-9558

Critical

Published: 28/02/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

In libdwarf before version 20161124, there is a vulnerability that allows remote attackers to have unspecified impact via a crafted bit pattern in a signed leb number, known as a 'negation overflow'.

Risk Assessment

This vulnerability may lead to unpredictable application behavior, posing a risk to the integrity and availability of systems using libdwarf.

Recommendation

It is recommended to update the libdwarf library to a version after 20161124 to mitigate the risks associated with this vulnerability.

Original NVD description (English source)

(1) libdwarf/dwarf_leb.c and (2) dwarfdump/print_frames.c in libdwarf before 20161124 allow remote attackers to have unspecified impact via a crafted bit pattern in a signed leb number, aka a "negation overflow."