GNU Binutils thru 2.46 readelf contains a vulnerability that leads to an abort (SIGABRT) when processing a crafted ELF binary with malformed DWARF abbrev or debug information. Due to incomplete state cleanup in process_debug_info(), an invalid debug_info_p state may propagate into DWARF attribute parsing routines. When certain malformed attributes result in an unexpected data length of zero, byte_get_little_endian() triggers a fatal abort. No evidence of memory corruption or code execution was observed; the impact is limited to denial of service.

...

CVE-2025-69649

A flaw was found in binutils. Processing a specially crafted ELF binary file containing malformed header fields with the readelf program can trigger a NULL pointer dereference, causing a crash and resulting in a denial of service. Mitigation To mitigate this vulnerability, do not process untruste...

UBUNTU-CVE-2025-69652

GNU Binutils thru 2.46 readelf contains a vulnerability that leads to an abort SIGABRT when processing a crafted ELF binary with malformed DWARF abbrev or debug information. Due to incomplete state cleanup in processdebuginfo, an invalid debuginfop state may propagate into DWARF attribute parsing...

UBUNTU-CVE-2025-66862

A buffer overflow vulnerability in function gnuspecial in file cplus-dem.c in BinUtils 2.26 allows attackers to cause a denial of service via crafted PE file...

CVE-2025-66862

CVE-2025-66862 affects GNU Binutils 2.26, with a buffer overflow in gnu_special (cplus-dem.c) that can cause a denial-of-service via a crafted PE file. The issue can trigger a heap-based buffer over-read and terminate affected processes. CVSS v3.1 base score 7.5 (HIGH). Connected advisories ident...

EUVD-2025-36694

An unquoted service path in Kingosoft Technology Ltd Kingo ROOT v1.5.8.3353 allows attackers to escalate privileges via placing a crafted executable file into a parent folder...

CVE-2025-57227

CVE-2025-57227 affects Kingo ROOT v1.5.8.3353 by Kingosoft Technology Ltd. The vulnerability is an unquoted service path that allows local privilege escalation by placing a crafted executable in the parent folder. Public sources (e.g., PT-2025-44334) suggest updating to a newer Kingo ROOT version...

CVE-2025-57227

An unquoted service path in Kingosoft Technology Ltd Kingo ROOT v1.5.8.3353 allows attackers to escalate privileges via placing a crafted executable file into a parent folder...

CVE-2025-57227

An unquoted service path in Kingosoft Technology Ltd Kingo ROOT v1.5.8.3353 allows attackers to escalate privileges via placing a crafted executable file into a parent folder...

EUVD-2017-14436

Malware in sbrugna...

EUVD-2009-2511

Malware in sbrugna...

EUVD-2015-3839

Malware in sbrugna...

EUVD-2019-5122

Malware in sbrugna...

EUVD-2019-2200

Malware in sbrugna...

Unity Linux 20.1070e Security Update: gdb (UTSA-2025-984798)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-984798 advisory. GNU Binutils before 2.40 was discovered to contain an excessive memory consumption vulnerability via the function bfddwarf2findnearestlinewithalt at dwarf2.c. The...

EUVD-2022-36094

Malicious code in bioql PyPI...

EUVD-2022-32552

Malicious code in bioql PyPI...

NVIDIA nvdisasm RELA section parsing out-of-bounds write vulnerability

Talos Vulnerability Report TALOS-2025-2172 NVIDIA nvdisasm RELA section parsing out-of-bounds write vulnerability September 24, 2025 CVE Number CVE-2025-23340 SUMMARY An out-of-bounds write vulnerability exists in the RELA section parsing functionality of NVIDIA nvdisasm 12.8.90. A specially...

Linux Distros Unpatched Vulnerability : CVE-2020-24821

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability in the dwarf::cursor::skipform function of Libelfin v0.3 allows attackers to cause a denial of service DOS through a segmentation fault via a...

Linux Distros Unpatched Vulnerability : CVE-2018-11376

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The rreadle32 function in radare2 2.5.0 allows remote attackers to cause a denial of service heap- based out-of-bounds read and application crash via a crafted...