CVE Catalog

CVE-2017-9055

Critical
Published: Translated: NVD NIST

Summary

An issue, also known as DW201703-001, was discovered in libdwarf in the function dwarf_formsdata(). A few data types were not checked for being in bounds, leading to a heap-based buffer over-read.

Risk Assessment

An attacker could exploit this vulnerability to read memory data, potentially leading to the disclosure of sensitive information or destabilization of the application.

Recommendation

It is recommended to update the libdwarf library to the latest version to mitigate this vulnerability and to implement additional boundary checks in the code.

Original NVD description (English source)

An issue, also known as DW201703-001, was discovered in libdwarf 2017-03-21. In dwarf_formsdata() a few data types were not checked for being in bounds, leading to a heap-based buffer over-read.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS