libdwarf 0.4.0 has a heap-based buffer over-read in dwarfcheckstringvalid in dwarf_util.c.
{ "urgency": "not yet assigned" }