10
| Source | Link |
|---|---|
| sourceware | www.sourceware.org/bugzilla/show_bug.cgi |
| exploit-db | www.exploit-db.com/exploits/42201/ |
| security | www.security.gentoo.org/glsa/201801-01 |
| securityfocus | www.securityfocus.com/bid/99113 |
| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| Input file to objdump -D | binary | sourceware.org/bugzilla/show_bug.cgi?id=21586 | CWE-119: Buffer overflow via crafted binary input in objdump disassembly (global-buffer-overflow in bfin-dis.c) | CWE-119 |
| decode_pseudodbg_assert_0 | nested | github.com/bminor/binutils-gdb/blob/561bf3e950e410fbcac06523d43039f1f58150ca/opcodes/bfin-dis.c#L4604 | Source code reference showing where the overflow occurs in bfin-dis.c (decode_pseudodbg_assert_0) | CWE-119 |
| Input binary triggers overflow | nested | github.com/bminor/binutils-gdb/blob/561bf3e950e410fbcac06523d43039f1f58150ca/opcodes/bfin-dis.c#L4604 | Source code reference showing where the overflow occurs in bfin-dis.c (decode_pseudodbg_assert_0) | CWE-119 |
| _print_insn_bfin | nested | github.com/bminor/binutils-gdb/blob/561bf3e950e410fbcac06523d43039f1f58150ca/opcodes/bfin-dis.c#L4760 | Code path for disassembly that can overflow when handling crafted input | CWE-119 |
| print_insn_bfin | nested | github.com/bminor/binutils-gdb/blob/561bf3e950e410fbcac06523d43039f1f58150ca/opcodes/bfin-dis.c#L4778 | Further disassembly processing with potential overflow | CWE-119 |
| disassemble_bytes | path | github.com/bminor/binutils-gdb/blob/561bf3e950e410fbcac06523d43039f1f58150ca/binutils/objdump.c#L1864 | Disassembly of bytes that can overflow on crafted input | CWE-119 |
| disassemble_section | path | github.com/bminor/binutils-gdb/blob/561bf3e950e410fbcac06523d43039f1f58150ca/binutils/objdump.c#L2309 | Disassembly of section with potential overflow on crafted input | CWE-119 |
| Input PoC zip | binary | https://github.com/offensive-security/exploit-database-bin-sploits/raw/master/sploits/42201.zip | PoC zip containing the minimized input triggering the overflow in objdump | CWE-119 |
| Proof of Concept | binary | https://github.com/offensive-security/exploit-database-bin-sploits/raw/master/sploits/42201.zip | PoC zip containing the minimized input triggering the overflow in objdump | CWE-119 |
| disassemble_data | nested | https://github.com/bminor/binutils-gdb/blob/561bf3e950e410fbcac06523d43039f1f58150ca/bfd/section.c#L1395 | Section data processing with potential overflow during disassembly | CWE-119 |
10
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
17 Jun 2026 01:28Current
7.9High risk
Vulners AI Score7.9
CVSS 26.8
CVSS 37.8
EPSS0.08506