Astra Linux – Vulnerability in binutils

In the GNU Binutils before version 2.40, there is a heap-buffer-overflow issue in the error function bfdgetl32 when called from the stripmain function in strip-new, through a specially crafted file...

AlmaLinux 9.6 [TuxCare] Security Update: binutils / binutils-devel / binutils-gold / cross-binutils-aarch64 / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1776963378)

The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1776963378 advisory. - In GNU Binutils before 2.40, there is a heap-buffer-overflow in the error function bfdgetl32 when called from the stripmain functi...

Astra Linux – Vulnerability in binutils

A issue was discovered in the Binary File Descriptor BFD library also known as libbfd, as distributed in GNU Binutils 2.32. It is an out-of-bounds read that leads to a segmentation fault in bfdgetl32 in libbfd.c, when called from pex64getruntimefunction in pei-x8664.c...

binutils:fuzz_addr2line: Crash in bfd_getl32

Detailed Report: https://oss-fuzz.com/testcase?key=4743829805924352 Project: binutils Fuzzing Engine: honggfuzz Fuzz Target: fuzzaddr2line Job Type: honggfuzzasanbinutils Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x79ec501a07db Crash State: bfdgetl32 m32relflo16reloc...

binutils:fuzz_addr2line: Heap-buffer-overflow in bfd_getl32

Detailed Report: https://oss-fuzz.com/testcase?key=5466981020270592 Project: binutils Fuzzing Engine: honggfuzz Fuzz Target: fuzzaddr2line Job Type: honggfuzzasanbinutils Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x75a3dd0e0741 Crash State: bfdgetl32 elfxtensadorel...

OSV-2026-350 UNKNOWN READ in bfd_getl32

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=489127262 Crash type: UNKNOWN READ Crash state: bfdgetl32 mips3264bitreloc bfdperformrelocation...

binutils:fuzz_addr2line: Crash in bfd_getl32

Detailed Report: https://oss-fuzz.com/testcase?key=5739957179449344 Project: binutils Fuzzing Engine: honggfuzz Fuzz Target: fuzzaddr2line Job Type: honggfuzzasanbinutils Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7bfe96d019d2 Crash State: bfdgetl32 mips3264bitreloc...

binutils:fuzz_addr2line: Crash in bfd_getl32

Detailed Report: https://oss-fuzz.com/testcase?key=5982695535738880 Project: binutils Fuzzing Engine: libFuzzer Fuzz Target: fuzzaddr2line Job Type: libfuzzerubsanbinutils Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x588ec1d72de0 Crash State: bfdgetl32 scoreelflo16reloc...

EUVD-2022-41112

Malicious code in bioql PyPI...

binutils:fuzz_objcopy: Heap-buffer-overflow in bfd_getl32

Detailed Report: https://oss-fuzz.com/testcase?key=6099386087309312 Project: binutils Fuzzing Engine: libFuzzer Fuzz Target: fuzzobjcopy Job Type: libfuzzerasanbinutils Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x50b000000704 Crash State: bfdgetl32...

binutils:fuzz_windres: Heap-buffer-overflow in bfd_getl32

Detailed Report: https://oss-fuzz.com/testcase?key=5532597977677824 Project: binutils Fuzzing Engine: afl Fuzz Target: fuzzwindres Job Type: aflasanbinutils Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x52100000d8e0 Crash State: bfdgetl32 bintores readcoffdataentry...

GNU Binutils DoS

The vulnerability of the bfdgetl32 function in the GNU Binutils development environment is related to writing beyond the buffer boundaries. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

libbfd Heap Buffer Overflow DoS

The vulnerability of the bfdgetl32 function in the libbfd.c component of the GNU Binutils development environment involves reading data beyond the acceptable buffer size. Exploiting this vulnerability allows a remote attacker to trigger a service failure using a specially created PE file...

binutils:fuzz_objdump_safe: Segv on unknown address in bfd_getl32

Detailed Report: https://oss-fuzz.com/testcase?key=4958718955225088 Project: binutils Fuzzing Engine: libFuzzer Fuzz Target: fuzzobjdumpsafe Job Type: libfuzzermsanbinutils Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: bfdgetl32...

OESA-2023-1570 binutils security update

The GNU Binutils are a collection of binary tools. Security Fixes: Heap-based Buffer Overflow in function bfdgetl32 in Binutils objdump 3.37.CVE-2021-46174 An issue was discovered function maketempdir, and maketempname in bucomm.c in Binutils 2.34 thru 2.38, allows attackers to cause a denial of...

SUSE CVE-2021-46174

Heap-based Buffer Overflow in function bfdgetl32 in Binutils objdump 3.37...

CVE-2020-19726

A heap-based buffer overflow was found in binutils in the bfdgetl32 function, relating to the auxiliary symbol data. This flaw allows an attacker to read or write to system memory or cause a denial of service...

CVE-2021-46174

Heap-based Buffer Overflow in function bfdgetl32 in Binutils objdump 3.37...

DEBIAN-CVE-2021-46174

Heap-based Buffer Overflow in function bfdgetl32 in Binutils objdump 3.37...

GNU Binutils Buffer Error Vulnerability

GNU Binutils objdump is a command-line tool in the toolset that is primarily used to analyze and display detailed information about binary files e.g. executables, target files, static libraries, etc.. GNU Binutils objdump suffers from a heap buffer overflow vulnerability that stems from a boundar...