CVE-2016-9558

Severity: critical (CVSS 9.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 5.0% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2017-02-28 · updated 2026-06-17
Weakness: CWE-190

Description

(1) libdwarf/dwarf_leb.c and (2) dwarfdump/print_frames.c in libdwarf before 20161124 allow remote attackers to have unspecified impact via a crafted bit pattern in a signed leb number, aka a "negation overflow."

Affected products

Libdwarf Project Libdwarf: from 1999-12-14 before 2016-11-24 — fixed in 2016-11-24

How to fix

Upgrade to a fixed version: Libdwarf Project Libdwarf 2016-11-24. Check the vendor advisory for mitigations.

References

http://www.openwall.com/lists/oss-security/2016/11/19/6
http://www.openwall.com/lists/oss-security/2016/11/23/3
http://www.securityfocus.com/bid/94491
https://blogs.gentoo.org/ago/2016/11/19/libdwarf-negation-overflow-in-dwarf_leb-c/
https://sourceforge.net/p/libdwarf/code/ci/4f19e1050cd8e9ddf2cb6caa061ff2fec4c9b5f9/#diff-5
https://www.prevanders.net/dwarfbug.html
http://www.openwall.com/lists/oss-security/2016/11/19/6
http://www.openwall.com/lists/oss-security/2016/11/23/3
http://www.securityfocus.com/bid/94491
https://blogs.gentoo.org/ago/2016/11/19/libdwarf-negation-overflow-in-dwarf_leb-c/
https://sourceforge.net/p/libdwarf/code/ci/4f19e1050cd8e9ddf2cb6caa061ff2fec4c9b5f9/#diff-5
https://www.prevanders.net/dwarfbug.html

Get alerted when CVE-2016-9558 or the next vulnerability affects your stack