Critical severity9.8OSV Advisory· Published Feb 28, 2017· Updated Jun 17, 2026
CVE-2016-9558
CVE-2016-9558
Description
(1) libdwarf/dwarf_leb.c and (2) dwarfdump/print_frames.c in libdwarf before 20161124 allow remote attackers to have unspecified impact via a crafted bit pattern in a signed leb number, aka a "negation overflow."
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- Range: 20110113, 20110605, 20110607, …
cpe:2.3:a:libdwarf_project:libdwarf:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:libdwarf_project:libdwarf:*:*:*:*:*:*:*:*range: >=1999-12-14,<2016-11-24
- (no CPE)range: <20161124
Patches
Vulnerability mechanics
References
6- www.openwall.com/lists/oss-security/2016/11/19/6nvdMailing ListPatchThird Party Advisory
- www.openwall.com/lists/oss-security/2016/11/23/3nvdMailing ListPatchThird Party Advisory
- blogs.gentoo.org/ago/2016/11/19/libdwarf-negation-overflow-in-dwarf_leb-c/nvdExploitPatchThird Party AdvisoryVDB Entry
- www.securityfocus.com/bid/94491nvdThird Party AdvisoryVDB Entry
- sourceforge.net/p/libdwarf/code/ci/4f19e1050cd8e9ddf2cb6caa061ff2fec4c9b5f9/nvdThird Party Advisory
- www.prevanders.net/dwarfbug.htmlnvdThird Party Advisory
News mentions
0No linked articles in our index yet.