High severity7.5NVD Advisory· Published Feb 17, 2017· Updated May 13, 2026
CVE-2016-5038
CVE-2016-5038
Description
The dwarf_get_macro_startend_file function in dwarf_macro5.c in libdwarf before 20160923 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted string offset for .debug_str.
Affected products
1- cpe:2.3:a:libdwarf_project:libdwarf:*:*:*:*:*:*:*:*Range: >=1999-12-14,<2016-09-23
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
3- www.openwall.com/lists/oss-security/2016/05/24/1nvdMailing ListPatchThird Party Advisory
- www.openwall.com/lists/oss-security/2016/05/25/1nvdExploitMailing ListThird Party Advisory
- www.prevanders.net/dwarfbug.htmlnvdThird Party AdvisoryVDB Entry
News mentions
0No linked articles in our index yet.