An issue, also known as DW201703-001, was discovered in libdwarf 2017-03-21. In dwarf_formsdata() a few data types were not checked for being in bounds, leading to a heap-based buffer over-read.
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-9055.json"
[ { "events": [ { "introduced": "0" }, { "last_affected": "2017-03-21" } ] } ]