CVE Catalog
CVE-2017-9054
CriticalSummary
An issue was discovered in the libdwarf library that leads to a heap-based buffer over-read. The problem occurs in the _dwarf_decode_s_leb128_chk() function, where a byte pointer is dereferenced before being checked for bounds.
Risk Assessment
The buffer over-read may lead to the disclosure of sensitive data in memory, posing a security risk to applications using this library.
Recommendation
It is recommended to update the libdwarf library to the latest version to mitigate this vulnerability and conduct a code audit to identify potential threats.
Original NVD description (English source)
An issue, also known as DW201703-002, was discovered in libdwarf 2017-03-21. In _dwarf_decode_s_leb128_chk() a byte pointer was dereferenced just before it was checked for being in bounds, leading to a heap-based buffer over-read.