binutils: heap-based buffer over-read in gnu_special() in cplus-dem.c

A flaw was found in binutils. Processing a specially crafted PE file with cxxfilt can trigger a heap-based buffer over-read in the gnuspecial function in the cplus-dem.c file, causing a crash and resulting in a denial of service...

binutils: Binutils objdump: Denial of Service via crafted DWARF debug information

A flaw was found in binutils, specifically in the objdump utility. A local attacker can exploit this vulnerability by providing a specially crafted binary file containing malformed DWARF Debugging With Attributed Record Formats debug information. This can lead to a logic error during the processi...

binutils: infinite loop in readelf via crafted binary with malformed DWARF loclists data

A flaw was found in binutils. Processing a specially crafted ELF binary file containing malformed DWARF loclists data with the readelf program can trigger an infinite loop and result in a denial of service...

binutils: GNU Binutils Linker elflink.c get_link_hash_entry out-of-bounds

A flaw was found in binutils. Processing a specially crafted object file with the ld linker can trigger an out-of-bounds read in the getlinkhashentry function in the bfd/elflink.c file due to an improper check, causing a crash and resulting in a denial of service...

binutils: Binutils: Denial of Service via crafted binary with malformed DWARF debug information

A flaw was found in binutils. A local attacker can exploit a logic flaw in the handling of DWARF Debugging With Attributed Record Formats location list headers within the objdump utility. By supplying a crafted binary with malformed debug information, the attacker can cause objdump to enter an...

binutils: NULL pointer dereference in d_print_comp_inner() in cp-demangle.c

A flaw was found in binutils. Processing a specially crafted PE file with cxxfilt can trigger a NULL pointer dereference in the dprintcompinner function in the cp-demangle.c file, causing a crash and resulting in a denial of service...

Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-7.5.1)

The version of AOS installed on the remote host is prior to 7.5.1. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AOS-7.5.1 advisory. - A vulnerability has been found in GNU Binutils 2.45. The affected element is the function elfswapshdr in the library...

The vulnerability of the GNU Binutils development tool, related to reading beyond the buffer boundaries in memory, allows an attacker to disclose protected information or cause system failures.

The vulnerability of the GNU Binutils development tool lies in the reading of data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information or cause system failures...

[SECURITY] Fedora 42 Update: mingw-binutils-2.43.1-6.fc42

Cross compiled binutils utilities like 'strip', 'as', 'ld' which understand Windows executables and DLLs...

[SECURITY] Fedora 43 Update: mingw-binutils-2.45.1-2.fc43

Cross compiled binutils utilities like 'strip', 'as', 'ld' which understand Windows executables and DLLs...

Fedora 42 : mingw-binutils (2026-fe96f3532b)

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-fe96f3532b advisory. Backport fixes for multiple CVEs. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus...

Fedora 43 : mingw-binutils (2026-9174e6ea37)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-9174e6ea37 advisory. Backport fixes for multiple CVEs. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus...

CLSA-2026-1775148022 binutils: Fix of 3 CVEs

CVE-2025-66862: fix heap-buffer-overflow in gnuspecial in cplus-dem.c - CVE-2025-66863: fix SEGV in ddiscriminator in cp-demangle.c - CVE-2025-66865: fix stack overflow in dprintcomp in cp-demangle.c...

CLSA-2026-1775148284 binutils: Fix of 3 CVEs

CVE-2025-66862: fix heap-buffer-overflow in gnuspecial in cplus-dem.c - CVE-2025-66863: fix SEGV in ddiscriminator in cp-demangle.c - CVE-2025-66865: fix stack overflow in dprintcomp in cp-demangle.c...

Binutils: out-of-bounds read in xcoff relocation processing in gnu binutils bfd library

...

Photon OS 5.0: Binutils PHSA-2026-5.0-0796

An update of the binutils package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-0796. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Important Photon OS Security Update - PHSA-2026-5.0-0796

Updates of 'binutils' packages of Photon OS have been released...

GNU BinUtils Buffer Overflow Vulnerability (CNVD-2026-16063)

GNU BinUtils is a collection of programming tools for working with binaries from the American GNU community. A buffer overflow vulnerability exists in GNU BinUtils, which arises from processing specially crafted XCOFF object files without properly validating the relocation type value, and can be...

Important Photon OS Security Update - PHSA-2026-5.0-90-0796

Updates of 'binutils' packages of Photon OS have been released...

SUSE CVE-2026-4647

A flaw was found in the GNU Binutils BFD library, a widely used component for handling binary files such as object files and executables. The issue occurs when processing specially crafted XCOFF object files, where a relocation type value is not properly validated before being used. This can caus...