binutils:fuzz_addr2line: Heap-buffer-overflow in bfd_getb16

Detailed Report: https://oss-fuzz.com/testcase?key=4519077014208512 Project: binutils Fuzzing Engine: libFuzzer Fuzz Target: fuzzaddr2line Job Type: libfuzzerasanbinutils Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x5120000008e1 Crash State: bfdgetb16...

Linux kernel create_elf_fdpic_tables Heap Buffer Overflow DoS

The vulnerability of the createelffdpictables function in the Linux kernel file system is related to incorrect calculations. Exploiting this vulnerability could allow an attacker to cause a service failure...

UBUNTU-CVE-2025-2849

A vulnerability, which was classified as problematic, was found in UPX up to 5.0.0. Affected is the function PackLinuxElf64::unDTINIT of the file src/plxelf.cpp. The manipulation leads to heap-based buffer overflow. It is possible to launch the attack on the local host. The exploit has been...

UPX 安全漏洞

UPX is a free, secure, portable, scalable, high-performance executable shelling program for a wide range of executable formats. A security vulnerability exists in UPX 5.0.0 and earlier versions, which stems from an incorrect operation of the PackLinuxElf64::unDTINIT function that can cause a heap...

addr2line (>=0.1.0, <=0.3.0), ai4ose-tg-rcore-tutorial-ch8-doom (0.1.0-preview.1) +142 more potentially affected by unknown CVE via xmas-elf (>=0.3.0, <=0.9.1)

xmas-elf CARGO version =0.3.0, =0.1.0, =0.1.4, =0.1.0, =0.1.0, =0.1.1, =0.11.0-beta, =0.1.0-alpha.0, =0.1.0-alpha.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.0.0, =0.0.1 and more Source cves: unknown CVE Source advisory: OSV:GHSA-9CC5-2PQ7-HFJ8...

GHSA-9CC5-2PQ7-HFJ8 xmas-elf potential out-of-bounds read with a malformed ELF file and the HashTable API.

Affected versions of this crate only validated the index argument of HashTable::getbucket and HashTable::getchain against the input-controlled bucketcount and chaincount fields, but not against the size of the ELF section. As a result, a malformed ELF file could trigger out-of-bounds reads in a...

xmas-elf potential out-of-bounds read with a malformed ELF file and the HashTable API.

Affected versions of this crate only validated the index argument of HashTable::getbucket and HashTable::getchain against the input-controlled bucketcount and chaincount fields, but not against the size of the ELF section. As a result, a malformed ELF file could trigger out-of-bounds reads in a...

addr2line (>=0.1.0, <=0.3.0), ai4ose-tg-rcore-tutorial-ch8-doom (0.1.0-preview.1) +142 more potentially affected by unknown CVE via xmas-elf (>=0.3.0, <=0.9.1)

xmas-elf CARGO version =0.3.0, =0.1.0, =0.1.4, =0.1.0, =0.1.0, =0.1.1, =0.11.0-beta, =0.1.0-alpha.0, =0.1.0-alpha.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.0.0, =0.0.1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2025-0018...

RUSTSEC-2025-0018 Potential out-of-bounds read with a malformed ELF file and the HashTable API.

Affected versions of this crate only validated the index argument of HashTable::getbucket and HashTable::getchain against the input-controlled bucketcount and chaincount fields, but not against the size of the ELF section. As a result, a malformed ELF file could trigger out-of-bounds reads in a...

PT-2025-13025

Affected versions of this crate only validated the index argument of HashTable::get bucket and HashTable::get chain against the input-controlled bucket count and chain count fields, but not against the size of the ELF section. As a result, a malformed ELF file could trigger out-of-bounds reads in...

PT-2025-13024

Affected versions of this crate only validated the index argument of HashTable::get bucket and HashTable::get chain against the input-controlled bucket count and chain count fields, but not against the size of the ELF section. As a result, a malformed ELF file could trigger out-of-bounds reads in...

Linux kernel load_elf_binary() DoS

The vulnerability of the loadelfbinary function in the Linux kernel file system is related to improper validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

upx:decompress_packed_file_fuzzer: Heap-buffer-overflow in N_BELE_RTP::BEPolicy::get64

Project: https://github.com/upx/upx.git Detailed Report: https://oss-fuzz.com/testcase?key=6609330527076352 Project: upx Fuzzing Engine: afl Fuzz Target: decompresspackedfilefuzzer Job Type: aflasanupx Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x51b00000229f Crash...

binutils:fuzz_objdump_safe: Heap-buffer-overflow in _bfd_elf_parse_attributes

Detailed Report: https://oss-fuzz.com/testcase?key=6601247063080960 Project: binutils Fuzzing Engine: libFuzzer Fuzz Target: fuzzobjdumpsafe Job Type: libfuzzerasanbinutils Platform Id: linux Crash Type: Heap-buffer-overflow READ 3 Crash Address: 0x5020000000b7 Crash State: bfdelfparseattributes...

Linux Distros Unpatched Vulnerability : CVE-2017-14940

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - scanunitforsymbols in dwarf2.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.29, allows remote attackers to cause a...

Linux Distros Unpatched Vulnerability : CVE-2018-10254

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Netwide Assembler NASM 2.13 has a stack-based buffer over-read in the disasm function of the disasm/disasm.c file. Remote attackers could leverage this...

Linux Distros Unpatched Vulnerability : CVE-2017-15939

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dwarf2.c in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.29, mishandles NULL files in a .debugline file table, which allo...

Linux Distros Unpatched Vulnerability : CVE-2018-18310

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An invalid memory address dereference was discovered in dwflsegmentreportmodule.c in libdwfl in elfutils through v0.174. The vulnerability allows attackers to...

Linux Distros Unpatched Vulnerability : CVE-2017-16827

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The aoutgetexternalsymbols function in aoutx.h in the Binary File Descriptor BFD library aka libbfd, as distributed in GNU Binutils 2.29.1, allows remote...

Linux Distros Unpatched Vulnerability : CVE-2013-2196

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Multiple unspecified vulnerabilities in the Elf parser libelf in Xen 4.2.x and earlier allow local guest administrators with certain permissions to have an...