PatchSiren

Libdwarf Project CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM Libdwarf Project CVE published 2017-01-23

CVE-2016-7410

CVE-2016-7410 affects libdwarf 20160613 and can cause a denial of service through a buffer over-read in _dwarf_read_loc_section while processing a crafted file. The issue is mapped to CWE-125 and carries a CVSS 3.1 base score of 5.5 (AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H). Public references in OSS-Security predate the NVD publication, indicating the issue was discussed before the CVE record was published on 2017-01-23.