CVE-2025-1148 affecting package binutils for versions less than 2.41-11

CVE-2025-1148 affecting package binutils for versions less than 2.41-11. A patched version of the package is available...

CVE-2025-69649 affecting package binutils for versions less than 2.41-11

CVE-2025-69649 affecting package binutils for versions less than 2.41-11. A patched version of the package is available...

CVE-2025-69648 affecting package binutils for versions less than 2.41-11

CVE-2025-69648 affecting package binutils for versions less than 2.41-11. A patched version of the package is available...

CVE-2025-69646 affecting package binutils for versions less than 2.41-11

CVE-2025-69646 affecting package binutils for versions less than 2.41-11. A patched version of the package is available...

CVE-2026-4647 affecting package binutils for versions less than 2.41-11

CVE-2026-4647 affecting package binutils for versions less than 2.41-11. A patched version of the package is available...

CVE-2025-69647 affecting package binutils for versions less than 2.41-11

CVE-2025-69647 affecting package binutils for versions less than 2.41-11. A patched version of the package is available...

CVE-2025-69645 affecting package binutils for versions less than 2.41-11

CVE-2025-69645 affecting package binutils for versions less than 2.41-11. A patched version of the package is available...

CVE-2025-69652 affecting package binutils for versions less than 2.41-11

CVE-2025-69652 affecting package binutils for versions less than 2.41-11. A patched version of the package is available...

CVE-2025-11839 affecting package binutils for versions less than 2.41-11

CVE-2025-11839 affecting package binutils for versions less than 2.41-11. A patched version of the package is available...

CLSA-2026-1776156000 binutils: Fix of 4 CVEs

CVE-2025-5244: fix NULL deref in elfgcsweep with empty groups - CVE-2025-5245: fix SEGV in debugtypesamep - CVE-2026-3441 CVE-2026-3442: fix out-of-bounds read in XCOFF relocation processing...

CLSA-2026-1776256866 binutils: Fix of CVE-2025-11082

CVE-2025-11082: Fix heap-based buffer overflow in bfdelfparseehframe; mitigate local memory corruption risk; apply upstream patches ea1a0737c769 and e4f355f13be...

CLSA-2026-1776256710 binutils: Fix of CVE-2025-11082

CVE-2025-11082: Fix heap-based buffer overflow in bfdelfparseehframe triggered by crafted EH frame data; apply patches ea1a0737c769 and e4f355f13be...

CLSA-2026-1776259627 binutils: Fix of CVE-2025-11082

CVE-2025-11082: fix heap-based buffer overflow in bfdelfparseehframe...

binutils:fuzz_as: Heap-use-after-free in ignore_rest_of_line

Detailed Report: https://oss-fuzz.com/testcase?key=4870390680977408 Project: binutils Fuzzing Engine: honggfuzz Fuzz Target: fuzzas Job Type: honggfuzzasanbinutils Platform Id: linux Crash Type: Heap-use-after-free READ 1 Crash Address: 0x75acd82e0171 Crash State: ignorerestofline sinsn...

CLSA-2026-1776083558 binutils: Fix of 4 CVEs

CVE-2025-5244: fix NULL deref in elfgcsweep on empty section group - CVE-2025-5245: fix NULL deref in debugtypesamep for incomplete enum types - CVE-2026-3441, CVE-2026-3442: fix xcofflink out-of-bounds accesses...

NULL Pointer Dereference

Overview Affected versions of this package are vulnerable to NULL Pointer Dereference via the readelf process. An attacker can cause the process to become unresponsive or crash by enticing a user to execute it on a specially crafted ELF file, resulting in resource exhaustion or a segmentation...

binutils:fuzz_addr2line: Crash in bfd_getl32

Detailed Report: https://oss-fuzz.com/testcase?key=4743829805924352 Project: binutils Fuzzing Engine: honggfuzz Fuzz Target: fuzzaddr2line Job Type: honggfuzzasanbinutils Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x79ec501a07db Crash State: bfdgetl32 m32relflo16reloc...

Unity Linux 20.1070e Security Update: binutils (UTSA-2026-007081)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-007081 advisory. A vulnerability classified as problematic was found in GNU Binutils 2.45. Affected by this vulnerability is the function copysection of the file binutils/objcopy.c...

Unity Linux 20.1070e Security Update: binutils (UTSA-2026-007090)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-007090 advisory. A vulnerability, which was classified as problematic, has been found in GNU Binutils 2.45. Affected by this issue is the function bfdelfsetgroupcontents of the file...

Unity Linux 20.1070e Security Update: binutils (UTSA-2026-007092)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-007092 advisory. A vulnerability was found in GNU Binutils 2.44 and classified as problematic. This issue affects the function processdebuginfo of the file binutils/dwarf.c of the...