CVE-2016-2091

FAUCET Score

CVE-2016-2091 is an out-of-bounds read vulnerability in the dwarf_read_cie_fde_prefix function within libdwarf, affecting versions up to 20151114. An attacker could exploit this by providing a specially crafted ELF object file, leading to a denial of service. The vulnerability has a low CVSS score of 3.3, indicating a low attack complexity and impact, requiring user interaction to trigger. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.

Impacted Technologies

Vendor	Product	Version(s)	CPE
		2015-11-14CPE matchmatch criteria	cpe:2.3:a:libdwarf_project:libdwarf:2015-11-14:::::::*

CVSS Data

CVSS version used by this source: 3.1

3.3LOW

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

Exploitability Score

1.8

Impact Score

1.4

CvssVersion

3.1

Exploit Intelligence

EPSS Score

0.90%

Probability of exploitation in next 30 days

EPSS Percentile

55.9%

Percentile rank of EPSS score among Peer Group

As of 2026-07-24

Model: v2026.06.15

This CVE's current EPSS score of 0.0090 is in the 65th percentile among its peer group of 576 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.0 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Vendor Patches (1)

redhatend of lifevia redhat_api

Product: Red Hat Enterprise Linux 7Fixed in: libdwarf

Vendor Advisories (1)

redhatCVE-2016-2091Low

libdwarf: Out-of-bounds read in dwarf_frame2.c

Jan 19, 2016

References

openwall.com / lists/oss-security/2016/01/19/3

ExploitMailing List

openwall.com / lists/oss-security/2016/01/28/8

Mailing List