libdwarf 0.4.0 has a heap-based buffer over-read in dwarfcheckstringvalid in dwarf_util.c.
{ "ubuntu_priority": "medium" }