Priority HIGH 73
An issue was discovered in binutils libbfd.c 2.36 relating to the auxiliary symbol data allows attackers to read or write to system memory or cause a denial of service.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00752 · Published 2023-08-22 · No fix listed CWE-400
Priority HIGH 72
GNU Binutils thru 2.46 readelf contains a double free vulnerability when processing a crafted ELF binary with malformed relocation data.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00588 · Published 2026-03-06 · Partial fix CWE-415
Priority HIGH 72
An issue was discovered in function d_print_comp_inner in file cp-demangle.c in BinUtils 2.26 allows attackers to cause a denial of service via crafted PE file.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00376 · Published 2025-12-29 · Partial fix CWE-121
Priority HIGH 72
An issue was discovered in function d_discriminator in file cp-demangle.c in BinUtils 2.26 allows attackers to cause a denial of service via crafted PE file.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00376 · Published 2025-12-29 · Partial fix CWE-400
Priority HIGH 72
A buffer overflow vulnerability in function gnu_special in file cplus-dem.c in BinUtils 2.26 allows attackers to cause a denial of service via crafted PE file.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.0037 · Published 2025-12-29 · Partial fix CWE-122
Priority HIGH 72
Heap-based Buffer Overflow in function bfd_getl32 in Binutils objdump 3.37.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.0082 · Published 2023-08-22 · No fix listed CWE-787
Priority HIGH 72
GNU Binutils before 2.34 has an uninitialized-heap vulnerability in function tic4x_print_cond (file opcodes/tic4x-dis.c) which could allow attackers to make an information leak.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00768 · Published 2023-08-22 · No fix listed CWE-665
Priority HIGH 69
An issue was discovered Binutils objdump before 2.39.3 allows attackers to cause a denial of service or other unspecified impacts via function compare_symbols.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00416 · Published 2023-08-22 · No fix listed CWE-400
Priority HIGH 69
An issue was discovered Binutils objdump before 2.39.3 allows attackers to cause a denial of service or other unspecified impacts via function bfd_mach_o_get_synthetic_symtab in match-o.c.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00446 · Published 2023-08-22 · No fix listed CWE-400
Priority HIGH 69
An issue was discovered in Binutils addr2line before 2.39.3, function parse_module contains multiple out of bound reads which may cause a denial of service or other unspecified impacts.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.0042 · Published 2023-08-22 · No fix listed CWE-125
Priority HIGH 69
Heap buffer overflow vulnerability in binutils readelf before 2.40 via function display_debug_section in file readelf.c.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00493 · Published 2023-08-22 · No fix listed CWE-787
Priority HIGH 69
Heap buffer overflow vulnerability in binutils readelf before 2.40 via function find_section_in_set in file readelf.c.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00493 · Published 2023-08-22 · No fix listed CWE-787
Priority HIGH 66
GNU Binutils thru 2.46 readelf contains a null pointer dereference vulnerability when processing a crafted ELF binary with malformed header fields.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00308 · Published 2026-03-06 · Partial fix CWE-476
Priority HIGH 66
An issue was discovered in function d_abi_tags in file cp-demangle.c in BinUtils 2.26 allows attackers to cause a denial of service via crafted PE file.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00311 · Published 2025-12-29 · Partial fix CWE-20
Priority HIGH 66
An issue was discovered in function d_print_comp_inner in file cp-demangle.c in BinUtils 2.26 allows attackers to cause a denial of service via crafted PE file.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00244 · Published 2025-12-29 · Partial fix CWE-20
Priority MEDIUM 62
An issue was discovered in GNU libiberty, as distributed in GNU Binutils 2.36.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00749 · Published 2023-07-18 · No fix listed CWE-787
Priority MEDIUM 61
GNU Binutils thru 2.46 readelf contains a vulnerability that leads to an abort (SIGABRT) when processing a crafted ELF binary with malformed DWARF abbrev or debug information.
CVSS 3.1MEDIUM 6.2· Local · No auth · No interaction · EPSS 0.00202 · Published 2026-03-06 · Partial fix CWE-460
Priority MEDIUM 61
GNU Binutils thru 2.45.1 readelf contains a denial-of-service vulnerability when processing a crafted binary with malformed DWARF .debug_rnglists data.
CVSS 3.1MEDIUM 6.2· Local · No auth · No interaction · EPSS 0.00202 · Published 2026-03-09 · Partial fix CWE-835
Priority MEDIUM 61
GNU Binutils thru 2.45.1 readelf contains a denial-of-service vulnerability when processing a crafted binary with malformed DWARF loclists data.
CVSS 3.1MEDIUM 6.2· Local · No auth · No interaction · EPSS 0.00178 · Published 2026-03-09 · Partial fix CWE-835
Priority MEDIUM 61
A vulnerability was found in GNU Binutils 2.43.
CVSS 4.0MEDIUM 6.3· Network · No auth · No interaction · EPSS 0.00797 · Published 2025-02-11 · Fix deferred CWE-119
Priority MEDIUM 61
A vulnerability, which was classified as problematic, was found in GNU Binutils up to 2.43.
CVSS 4.0MEDIUM 6.3· Network · No auth · No interaction · EPSS 0.00759 · Published 2025-01-29 · Fix deferred CWE-119
Priority MEDIUM 58
GNU Binutils thru 2.46 readelf contains a vulnerability that leads to an invalid pointer free when processing a crafted ELF binary with malformed relocation or symbol data.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00274 · Published 2026-03-06 · Partial fix CWE-476
Priority MEDIUM 58
Binutils objdump contains a denial-of-service vulnerability when processing a crafted binary with malformed DWARF debug_rnglists data.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00175 · Published 2026-03-06 · Partial fix CWE-400
Priority MEDIUM 58
Binutils objdump contains a denial-of-service vulnerability when processing a crafted binary with malformed DWARF debug information.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00192 · Published 2026-03-06 · Partial fix CWE-400
Priority MEDIUM 58
A flaw was found in Binutils.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00379 · Published 2023-09-14 · Fix deferred CWE-457
Load more