upx:decompress_packed_file_fuzzer: Heap-buffer-overflow in N_BELE_RTP::BEPolicy::get32

Detailed Report: https://oss-fuzz.com/testcase?key=6679819541872640 Project: upx Fuzzing Engine: afl Fuzz Target: decompresspackedfilefuzzer Job Type: aflasanupx Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x79e53bbe1d9f Crash State: NBELERTP::BEPolicy::get32...

Unity Linux 20.1060e / 20.1070e Security Update: binutils (UTSA-2026-017409)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017409 advisory. An out of bounds flaw was found in GNU binutils objdump utility version 2.36. An attacker could use this flaw and pass a large section to...

upx:list_packed_file_fuzzer: Heap-buffer-overflow in N_BELE_RTP::LEPolicy::get32

Project: https://github.com/upx/upx.git Detailed Report: https://oss-fuzz.com/testcase?key=6493481227059200 Project: upx Fuzzing Engine: libFuzzer Fuzz Target: listpackedfilefuzzer Job Type: libfuzzerasanupx Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x51b00000146c...

upx:test_packed_file_fuzzer: Heap-buffer-overflow in N_BELE_RTP::BEPolicy::get32

Project: https://github.com/upx/upx.git Detailed Report: https://oss-fuzz.com/testcase?key=4717325636403200 Project: upx Fuzzing Engine: libFuzzer Fuzz Target: testpackedfilefuzzer Job Type: libfuzzerasanupx Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x52d00003ec00...

upx:test_packed_file_fuzzer: Crash in PackLinuxElf32::adjABS

Project: https://github.com/upx/upx.git Detailed Report: https://oss-fuzz.com/testcase?key=5866017448329216 Project: upx Fuzzing Engine: libFuzzer Fuzz Target: testpackedfilefuzzer Job Type: libfuzzerasanupx Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x0000000094ff Crash State:...

upx:list_packed_file_fuzzer: Heap-buffer-overflow in N_BELE_RTP::BEPolicy::get32

Project: https://github.com/upx/upx.git Detailed Report: https://oss-fuzz.com/testcase?key=4528496344891392 Project: upx Fuzzing Engine: afl Fuzz Target: listpackedfilefuzzer Job Type: aflasanupx Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x62b0000144c8 Crash State:...

The vulnerability of the `avr_elf32_load_records_from_section()` function in the GNU Binutils development environment, related to writing beyond the buffer boundaries in memory, allows a malicious actor to trigger a system failure.

The vulnerability of the avrelf32loadrecordsfromsection function in the GNU Binutils development environment is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause a system failure...

radare2:ia_fuzz: Crash in r_str_ncpy

Project: https://github.com/radare/radare2.git https://github.com/radareorg/radare2.git Detailed Report: https://oss-fuzz.com/testcase?key=4843147658919936 Project: radare2 Fuzzing Engine: libFuzzer Fuzz Target: iafuzz Job Type: libfuzzerasanradare2 Platform Id: linux Crash Type: UNKNOWN READ Cra...

SUSE CVE-2021-43313

A heap-based buffer overflow was discovered in upx, during the variable 'bucket' points to an inaccessible address. The issue is being triggered in the function PackLinuxElf32::invertptdynamic at plxelf.cpp:1688...

SUSE CVE-2021-3549

An out of bounds flaw was found in GNU binutils objdump utility version 2.36. An attacker could use this flaw and pass a large section to avrelf32loadrecordsfromsection probably resulting in a crash or in some cases memory corruption. The highest threat from this vulnerability is to integrity as...

OESA-2021-1242 binutils security update

The GNU Binutils are a collection of binary tools. Security Fixes: An out of bounds flaw was found in GNU binutils objdump utility version 2.36. An attacker could use this flaw and pass a large section to avrelf32loadrecordsfromsection probably resulting in a crash or in some cases memory...

GNU Binutils 缓冲区错误漏洞

GNU Binutils GNU Binary Utilities or binutils is a set of programming language utility programs developed by the GNU community. The programs are primarily used to work with target files in a variety of formats, and provide connectors, assemblers, and other tools for target files and archives. A...

PT-2021-7938 · Gnu +1 · Gnu Binutils +1

Name of the Vulnerable Software and Affected Versions: GNU binutils version 2.36 Description: An out of bounds flaw was found in the GNU binutils objdump utility. This issue is related to the avr elf32 load records from section function and can result in a crash or memory corruption if a large...

elfutils: heap-based buffer over-read in function elf32_xlatetom in elf32_xlatetom.c

In elfutils 0.175, a heap-based buffer over-read was discovered in the function elf32xlatetom in elf32xlatetom.c in libelf. A crafted ELF input can cause a segmentation fault leading to denial of service program crash because eblcorenote does not reject malformed core file notes...

PT-2019-1678 · Red Hat +5 · Elfutils +6

Name of the Vulnerable Software and Affected Versions: elfutils version 0.175 Description: A heap-based buffer over-read was discovered in the elf32 xlatetom function in libelf. This issue can be triggered by a crafted ELF input, causing a segmentation fault that leads to a denial of service...

DEBIAN-CVE-2018-19931

An issue was discovered in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils through 2.31. There is a heap-based buffer overflow in bfdelf32swapphdrin in elfcode.h because the number of program headers is not restricted...

PT-2018-2454

Name of the Vulnerable Software and Affected Versions GNU Binutils versions through 2.31 Description An issue was discovered in the Binary File Descriptor BFD library, which is part of GNU Binutils. The problem is a heap-based buffer overflow in the bfd elf32 swap phdr in function, located in...

Linux/ARM - Jump Back Shellcode + execve("/bin/sh", NULL, NULL) Shellcode (4 Bytes)

/ Title: Linux/ARM - Jump Back Shellcode + execve"/bin/sh", NULL, NULL Shellcode 4 Bytes Author: Ken Kitahara Tested: armv7l Raspberry Pi 3 Model B+ System Information pi@raspberrypi: $ uname -a Linux raspberrypi 4.14.52-v7+ 1123 SMP Wed Jun 27 17:35:49 BST 2018 armv7l GNU/Linux pi@raspberrypi: $...

Linux/ARM - Jump Back Shellcode + execve("/bin/sh", NULL, NULL) Shellcode (4 Bytes)

Linux/ARM - Jump Back Shellcode + execve"/bin/sh", NULL, NULL Shellcode 4 Bytes. Shellcode exploit for ARM platform / Title: Linux/ARM - Jump Back Shellcode + execve"/bin/sh", NULL, NULL Shellcode 4 Bytes Date: 2018-09-18 Author: Ken Kitahara Tested: armv7l Raspberry Pi 3 Model B+ System...

CVE-2017-14974

The getsyntheticsymtab functions in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.29, mishandle the failure of a certain canonicalization step, which allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a...