CVE-2017-9052
CriticalSummary
An issue was discovered in the libdwarf library related to a heap-based buffer over-read in the dwarf_formsdata() function. This problem arises from a failure to check if a pointer is in bounds in several places in this function and a failure in a check in the dwarf_attr_list() function.
Risk Assessment
The buffer over-read may lead to the disclosure of sensitive data in memory, posing a security risk to applications using this library.
Recommendation
It is recommended to update the libdwarf library to the latest version to mitigate this vulnerability and to conduct a code audit to identify potential areas susceptible to similar issues.
Original NVD description (English source)
An issue, also known as DW201703-006, was discovered in libdwarf 2017-03-21. A heap-based buffer over-read in dwarf_formsdata() is due to a failure to check a pointer for being in bounds (in a few places in this function) and a failure in a check in dwarf_attr_list().