binutils:fuzz_nm: Heap-use-after-free in pe_ILF_cleanup

Detailed Report: https://oss-fuzz.com/testcase?key=5379505107369984 Project: binutils Fuzzing Engine: libFuzzer Fuzz Target: fuzznm Job Type: libfuzzerasanbinutils Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x6020000000b8 Crash State: peILFcleanup bfdcheckformatmatch...

binutils:fuzz_addr2line: Dynamic-stack-buffer-overflow in error_handler_internal

Detailed Report: https://oss-fuzz.com/testcase?key=4529864160444416 Project: binutils Fuzzing Engine: afl Fuzz Target: fuzzaddr2line Job Type: aflasanbinutils Platform Id: linux Crash Type: Dynamic-stack-buffer-overflow READ 8 Crash Address: 0x7fff95da1338 Crash State: errorhandlerinternal...

PT-2017-17590

Name of the Vulnerable Software and Affected Versions GNU Binutils version 2.28 Description The issue arises from the pe ILF object p function in the Binary File Descriptor library, which is part of GNU Binutils. This function is vulnerable to a heap-based buffer over-read due to its use of the...