objdump-Out-Of-Bounds-write

GNU Binutils objdump — OOB Write → FSOP → Arbitrary Code Execution Target: GNU Binutils all versions through HEAD — objdump Environment: Debian 13 Trixie, glibc 2.41, x8664 Impact: Arbitrary code execution Vector: Crafted ELF file processed by objdump -g ASLR: Bypassed deterministic mmap delta...

Firmware-CVE-2025-7545

Preparing to download the repository 1. Update packages: sudo apt-get update 2. If necessary, install git: sudo apt install -y git Downloading the repository, installing the vulnerable Binutils, and setting up the environment 1. Download the repository: git clone...

CVE-2021-20294-POC

CVE-2021-20294-POC Jan 21 2023, Altin tin-z, github.com/tin-z Poc download and compile wget https://ftp.gnu.org/gnu/binutils/binutils-2.35.tar.gz && tar -xzvf binutils-2.35.tar.gz cd binutils-2.35 && ./configure && make && cd .. gcc -shared -fPIC poc.c -o poc.so -Wl,--version-script=poc.ver launc...

CVE-2021-3279

CVE-2021-3279 https://www.cvedetails.com/cve/CVE-2021-3279/...

CLEANSTART-2024-UU10832 issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2

Security vulnerability affects the mingw-w64-binutils package. An issue was discovered in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: gdb (UTSA-2026-142298)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142298 advisory. A security vulnerability has been detected in GNU Binutils 2.47. Affected is the function elfx8664commonsectionindex of the file bfd/elf64-x86-64.c of the component...

CVE-2026-91781

A flaw was found in GNU Binutils. A local attacker could exploit a null pointer dereference vulnerability in the ELF Section Handler. This could lead to a Denial of Service DoS, making the affected system or application unavailable...

CVE-2026-91779

A flaw was found in GNU Binutils. A local attacker can trigger a null pointer dereference within the Eh Frame Handler component by performing a specific manipulation. This vulnerability can lead to a Denial of Service DoS, making the affected system or application unavailable...

CVE-2026-91782

A flaw was found in GNU Binutils. A local attacker could exploit a null pointer dereference in the elfx86allocatedynrelocs function. This vulnerability could lead to a Denial of Service DoS condition, making the affected system or application unavailable...

CVE-2026-91780

A flaw was found in GNU Binutils. A local attacker can trigger a null pointer dereference by manipulating input to the 'elflinkaddobjectsymbols' function. This can lead to a denial of service DoS condition, making the affected component unavailable...

Astra Linux – Vulnerability in binutils

There is a memory leak issue in the Binary File Descriptor BFD library also known as libbfd within the GNU Binutils 2.34, specifically in the bfdhashlookup function. This issue can lead to a denial of service attack through a specially crafted file...

Astra Linux – Vulnerability in binutils

A issue was discovered in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.31. There is a NULL pointer dereference in workstuffcopytofrom when called from iteratedemanglefunction...

Astra Linux – Vulnerability in binutils

A issue was discovered in cp-demangle.c within GNU libiberty, as part of the GNU Binutils 2.31 package. This issue involves stack exhaustion during the C++ demangling functions provided by libiberty. There is also a stack consumption problem caused by recursive stack frames: cplusdemangletype,...

Astra Linux – vulnerability in binutils

A NULL pointer dereference also known as SEGV on an unknown address of 0x000000000000 was observed in workstuffcopytofrom within cplus-dem.c in GNU libiberty, as included in GNU Binutils 2.30. This can occur during execution of objdump...

Astra Linux – Vulnerability in binutils

The getcount function in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.31, allows remote attackers to cause a denial of service malloc calls with an integer overflow result or potentially have unspecified other impacts through a crafted string, as demonstrated by c++filt...

Astra Linux – Vulnerability in binutils

“rememberKtype” in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30, allows attackers to trigger excessive memory consumption also known as OOM. This can occur during the execution of cxxfilt...

Astra Linux – vulnerability in binutils

An issue was found in binutils libbfd.c 2.36; it involves auxiliary symbol data that allows attackers to read from or write to system memory, potentially leading to a denial of service...

Astra Linux – Vulnerability in binutils

A vulnerability was discovered in GNU Binutils 2.45. The affected function is bfdx86elflatesizesections in the file bfd/elfxx-x86.c of the Linker component. This vulnerability leads to out-of-bounds read attacks. The attack must be approached locally. The exploit has been made public and can be...

Astra Linux – Vulnerability in binutils

A issue was discovered in the Binary File Descriptor BFD library also known as libbfd, as distributed in GNU Binutils 2.32. There is a heap-based buffer over-read in bfddoprnt in bfd.c, due to elfobjectp in elfcode.h improperly handling the eshstrndx section of type SHTGROUP by omitting a trailin...

Astra Linux – vulnerability in binutils

An issue was discovered in the mergestrings function within merge.c in the Binary File Descriptor BFD library also known as libbfd, as included in GNU Binutils 2.31. There is a NULL pointer dereference in bfdaddmergesection when attempting to merge sections with large alignments. A specially...