CVE Catalog
CVE-2017-9053
CriticalSummary
An issue was discovered in libdwarf related to a heap-based buffer over-read in the _dwarf_read_loc_expr_op() function. This problem is due to a failure to check if a pointer is within bounds.
Risk Assessment
The buffer over-read may lead to the disclosure of sensitive information or application instability, posing a security threat to the system.
Recommendation
It is recommended to update the libdwarf library to the latest version to mitigate this vulnerability and implement additional pointer checks in the code.
Original NVD description (English source)
An issue, also known as DW201703-005, was discovered in libdwarf 2017-03-21. A heap-based buffer over-read in _dwarf_read_loc_expr_op() is due to a failure to check a pointer for being in bounds (in a few places in this function).