An issue was discovered Binutils objdump before 2.39.3 allows attackers to cause a denial of service or other unspecified impacts via function compare_symbols.

...

An issue was discovered in Binutils addr2line before 2.39.3, function parse_module contains multiple out of bound reads which may cause a denial of service or other unspecified impacts.

...

GNU Binutils objdump Memory Leak Vulnerability

GNU Binutils is a toolset for creating, assembling and linking programs. A memory leak vulnerability exists in GNU Binutils. The vulnerability stems from improper memory management in the displayinfo function in the bucomm.c file. No details of the vulnerability are provided at this time...

binutils:fuzz_windres: Use-of-uninitialized-value in bfd_getl16

Detailed Report: https://oss-fuzz.com/testcase?key=5758429706911744 Project: binutils Fuzzing Engine: libFuzzer Fuzz Target: fuzzwindres Job Type: libfuzzermsanbinutils Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: bfdgetl16 readcoffresdir readcoffrsrc...

binutils:fuzz_windres: Heap-buffer-overflow in bfd_getl32

Detailed Report: https://oss-fuzz.com/testcase?key=5532597977677824 Project: binutils Fuzzing Engine: afl Fuzz Target: fuzzwindres Job Type: aflasanbinutils Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x52100000d8e0 Crash State: bfdgetl32 bintores readcoffdataentry...

Advisory ROSA-SA-2025-2833

Software: binutils 2.30 OS: ROSA Virtualization 2.1 packageevrstring: binutils-2.30-125.0.1.rv3 CVE-ID: CVE-2018-12699 BDU-ID: 2021-01389 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the finishstab function of the stabs.c file of the Binutils program development kit is related to an operation...

Advisory ROSA-SA-2025-2815

Software: binutils 2.30 OS: ROSA Virtualization 3.0 packageevrstring: binutils-2.30-125.rv30 CVE-ID: CVE-2018-12699 BDU-ID: 2021-01389 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the finishstab function of the stabs.c file of the Binutils program development kit is related to an operation...

EulerOS 2.0 SP11 : binutils (EulerOS-SA-2025-1348)

According to the versions of the binutils package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A vulnerability, which was classified as problematic, was found in GNU Binutils up to 2.43. This affects the function disassemblebytes of the fil...

EulerOS 2.0 SP11 : binutils (EulerOS-SA-2025-1347)

According to the versions of the binutils package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A vulnerability, which was classified as problematic, was found in GNU Binutils up to 2.43. This affects the function disassemblebytes of the fil...

Huawei EulerOS: Security Advisory for binutils (EulerOS-SA-2025-1347)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for binutils (EulerOS-SA-2025-1348)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CBL Mariner 2.0 Security Update: gdb (CVE-2022-48065)

The version of gdb installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-48065 advisory. - GNU Binutils before 2.40 was discovered to contain a memory leak vulnerability var the function...

CBL Mariner 2.0 Security Update: gdb (CVE-2022-48064)

The version of gdb installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-48064 advisory. - GNU Binutils before 2.40 was discovered to contain an excessive memory consumption vulnerability via the functi...

GNU Binutils before 2.40 was discovered to contain a memory leak vulnerability var the function find_abstract_instance in dwarf2.c.

...

GNU Binutils before 2.40 was discovered to contain an excessive memory consumption vulnerability via the function bfd_dwarf2_find_nearest_line_with_alt at dwarf2.c. The attacker could supply a crafted ELF file and cause a DNS attack.

...

GNU Binutils Displaydebugnames DoS

The vulnerability of the displaydebugnames function in the GNU Binutils development environment is related to the insufficient use of the assert function. Exploiting this vulnerability could allow an attacker to cause a system failure...

GNU Binutils DoS

The vulnerability of the bfdgetl32 function in the GNU Binutils development environment is related to writing beyond the buffer boundaries. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

bfd/mach-o.c Component Buffer Overflow DoS

The vulnerability of the bfdmachogetsyntheticsymtab function in the bfd/mach-o.c component of the GNU Binutils development environment is related to errors during variable initialization. Exploiting this vulnerability could allow an attacker to cause a service failure...

GNU Binutils parse_module() Buffer Overflow DoS

The vulnerability of the parsemodule function in the bfd/vms-alpha.c component of the GNU Binutils development environment is related to reading data from beyond the allowed buffer limits. Exploiting this vulnerability could allow an attacker to access confidential data and also cause service...

GNU Binutils displaydebug_section Heap Buffer Overflow DoS

The vulnerability of the displaydebugsection function in the readelf.c component of the GNU Binutils development environment is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause...