CVE-2016-8681 The _dwarf_get_abbrev_for_code function in dwarf_util.c in libdwarf 20161001 and earlier allows remote attackers to cause a denial of service (out-of-bounds read) by calling the dwarfdump command on a crafted file.

Api.Msrc.Microsoft • February 18, 2026

Share: View original

Information published.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Multiple CVEs Discovered in libdwarf Affecting Various Versions Three vulnerabilities in the libdwarf library have been reported, affecting versions prior to specific release dates. CVE-2020-28163 allows NULL pointer dereference, CVE-2019-14249 involves header loading issues, and CVE-2016-8681 enables denial of service through out-of-bounds read. These vulnerabilities could impact applications relying on the affected library versions. 3 sources 41

Extracted Entities

Attack Types (1)

Denial of Service

CVEs (1)

MITRE ATT&CK (1)

T1499 - Endpoint Denial of Service

Tools (1)