Unity Linux 20.1070e Security Update: binutils (UTSA-2026-007090)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-007090 advisory. A vulnerability, which was classified as problematic, has been found in GNU Binutils 2.45. Affected by this issue is the function bfdelfsetgroupcontents of the file...

Unity Linux 20.1070e Security Update: binutils (UTSA-2026-007092)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-007092 advisory. A vulnerability was found in GNU Binutils 2.44 and classified as problematic. This issue affects the function processdebuginfo of the file binutils/dwarf.c of the...

binutils: Fix of 4 CVEs

CVE-2025-5244: fix NULL pointer dereference in elfgcsweep for empty section groups - CVE-2025-5245: fix memory corruption in debugtypesamep incorrect NULL check - CVE-2026-3441: fix out-of-bounds read in xcofflinkaddsymbols xscnlen bounds check - CVE-2026-3442: fix out-of-bounds read in...

binutils: BinUtils: Denial of Service via crafted PE file

A flaw was found in BinUtils. An attacker can exploit a vulnerability in the dabitags function within the cp-demangle.c file by providing a specially crafted Portable Executable PE file. This can lead to a Denial of Service DoS, making the affected application unavailable to legitimate users...

binutils: Binutils: Denial of Service via crafted ELF binary processing

A flaw was found in binutils. An attacker could exploit this vulnerability by providing a crafted Executable and Linkable Format ELF binary with malformed relocation or symbol data. Processing this malicious binary leads to an invalid pointer free, which triggers memory corruption checks and caus...

binutils: infinite loop in readelf via crafted binary with malformed DWARF .debug_rnglists data

A flaw was found in binutils. Processing a specially crafted ELF binary file containing malformed DWARF .debugrnglists data with the readelf program can trigger an infinite loop and result in a denial of service...

binutils: GNU Binutils out-of-bounds read

An out of bounds read flaw has been discovered in GNU binutils. The vfinfo function in the ldmisc.c file. Exploitation of this flaw requires local access and may cause a program crash...

binutils: Binutils: Denial of Service via malformed DWARF debug_rnglists data

A flaw was found in binutils. A local attacker can exploit this vulnerability by supplying a malicious input file containing malformed DWARF debugrnglists data. This can cause the objdump tool to enter an unbounded logging loop, leading to excessive CPU and I/O usage and preventing analysis...

binutils: GNU Binutils prdbg.c tg_tag_type return value

An uncheck return value flaw has been discovered in the GNU binutils program. This flaw exists in the tgtagtype function of the file prdbg.c and exploitation of this flaw may lead to a program crash...

binutils: GNU Binutils Linker out-of-bounds read

An out of bounds read flaw has been discovered in the GNU Binutils package. The impacted function is bfdx86elflatesizesections of the file bfd/elfxx-x86.c of the component Linker. The manipulation results in out-of-bounds read. The attack needs to be approached locally...

binutils: GNU Binutils Linker heap-based overflow

A head based buffer overflow flaw has been discovered in GNU bin utilities. The affected element is the function elfswapshdr in the library bfd/elfcode.h of the component Linker. The manipulation leads to heap-based buffer overflow. The attack must be carried out locally...

binutils: NULL pointer dereference in readelf via crafted ELF binary with malformed header fields

A flaw was found in binutils. Processing a specially crafted ELF binary file containing malformed header fields with the readelf program can trigger a NULL pointer dereference, causing a crash and resulting in a denial of service...

binutils: abort in readelf via crafted ELF binary with malformed DWARF abbrev or debug information

A flaw was found in binutils. Processing a specially crafted ELF binary file containing malformed DWARF abbrev or debug information with the readelf program using the -w abbrev command line option can trigger an abort, causing a crash and resulting in a denial of service...

binutils: GNU Binutils Linker elflink.c elf_link_add_object_symbols out-of-bounds

A flaw was found in binutils. Processing a specially crafted object file with the ld linker can trigger an out-of-bounds write in the bfdputl64 function in the bfd/libbfd.c file due to an improper check, causing a crash and resulting in a denial of service...

binutils: double free in readelf via crafted ELF binary with malformed relocation data

A flaw was found in binutils. Processing a specially crafted ELF binary file containing malformed relocation data with the readelf program can trigger a double free, causing a crash and resulting in a denial of service...

binutils: GNU Binutils Linker elflink.c bfd_elf_gc_record_vtentry out-of-bounds

A flaw was found in binutils. Processing a specially crafted object file with the ld linker can trigger an out-of-bounds read in the bfdelfgcrecordvtentry function in the bfd/elflink.c file due to a missing sanity check, causing a crash and resulting in a denial of service...

binutils: GNU Binutils Linker heap-based overflow

A head based buffer overflow flaw has been discovered in GNU bin utilities. Impacted is the function bfdelfparseehframe of the file bfd/elf-eh-frame.c of the component Linker. Executing manipulation can lead to heap-based buffer overflow. The attack is restricted to local execution...

binutils: GNU Binutils out-of-bounds read

An out of bounds read flaw has been discovered in GNU bin utilities. This issue affects the function dumpdwarfsection of the file binutils/objdump.c. Performing manipulation results in out-of-bounds read. The attack is only possible with local access...

binutils: BinUtils: Denial of Service via crafted PE file

A flaw was found in BinUtils. Attackers can exploit this vulnerability by providing a specially crafted Portable Executable PE file. This can lead to a denial of service, making the affected application unavailable...

binutils: out-of-bounds read in d_unqualified_name() in cp-demangle.c

A flaw was found in binutils. Processing a specially crafted PE file with cxxfilt can trigger an out-of-bounds read in the dunqualifiedname function in the cp-demangle.c file, causing a crash and resulting in a denial of service...