CVE-2016-9558: Libdwarf Project Libdwarf

Critical severity, CVSS 9.8. EPSS: 5% chance of exploitation in the next 30 days.

(1) libdwarf/dwarf_leb.c and (2) dwarfdump/print_frames.c in libdwarf before 20161124 allow remote attackers to have unspecified impact via a crafted bit pattern in a signed leb number, aka a "negation overflow."

Affected products

• Libdwarf Project Libdwarf: from 1999-12-14, before 2016-11-24 (fixed in 2016-11-24)

Published 2017-02-28. Last modified 2026-06-17.