CVE-2017-9055
CriticalSummary
An issue, also known as DW201703-001, was discovered in libdwarf in the function dwarf_formsdata(). A few data types were not checked for being in bounds, leading to a heap-based buffer over-read.
Risk Assessment
An attacker could exploit this vulnerability to read memory data, potentially leading to the disclosure of sensitive information or destabilization of the application.
Recommendation
It is recommended to update the libdwarf library to the latest version to mitigate this vulnerability and to implement additional boundary checks in the code.
Original NVD description (English source)
An issue, also known as DW201703-001, was discovered in libdwarf 2017-03-21. In dwarf_formsdata() a few data types were not checked for being in bounds, leading to a heap-based buffer over-read.

