objdump-Out-Of-Bounds-write

GNU Binutils objdump — OOB Write → FSOP → Arbitrary Code Execution Target: GNU Binutils all versions through HEAD — objdump Environment: Debian 13 Trixie, glibc 2.41, x8664 Impact: Arbitrary code execution Vector: Crafted ELF file processed by objdump -g ASLR: Bypassed deterministic mmap delta...

exploitarium

https://discord.gg/WytKH65ZR 加入我们的社区，获取研究、帮助、文档以及其他对感兴趣者有用的信息。 声明 该仓库发布时并不完整。 关于 AI 的使用，我的模糊测试工作流是由 AI 按照严格流程自动化的。我使用了 GPT-5.3 进行所有的模糊测试，因为当提供了高效的工作流时，几乎不需要任何"思考"。与那种我只是个随意烧 token 的孩子的流行说法相反，我确实拥有该学科的学位，并且发表了多篇关于模糊测试方法的论文。我花了数年时间研究和开发新的模糊测试工具和思路。你不需要一个 SOTA...

Astra Linux – Vulnerability in binutils

There is a flaw in the bfdpefparsefunctionstubs function within bfd/pef.c in the binutils in versions prior to 2.34. This flaw could allow an attacker who can submit a crafted file to be processed by objdump to cause a NULL pointer derefrence error. The most significant threat of this flaw is to...

Astra Linux – Vulnerability in binutils

A NULL pointer dereference also known as SEGV at an unknown address 0x000000000000 was discovered in the workstuffcopytofrom function in cplus-dem.c within GNU libiberty, as part of the GNU Binutils 2.30 distribution. This issue can occur during the execution of objdump...

Astra Linux – Vulnerability in binutils

A vulnerability was discovered in Binutils objdump prior to version 2.39.3. Attackers can exploit this vulnerability to cause a denial of service or other unspecified effects through the bfdmachogetsyntheticsymtab function in match-o.c...

Astra Linux – Vulnerability in binutils

Heap-based Buffer Overflow in the bfdgetl32 function in Binutils objdump 3.37...

Astra Linux – Vulnerability in binutils

A vulnerability has been identified in GNU Binutils 2.43/2.44 and is classified as problematic. The vulnerability affects the displayinfo function in the binutils/bucomm.c file, which is part of the objdump component. This vulnerability causes a memory leak. An attack must be approached locally...

Astra Linux – Vulnerability in binutils

A vulnerability classified as critical has been discovered in GNU Binutils version 2.44. This vulnerability affects the debugtypesamep function in the /binutils/debug.c file, belonging to the objdump component. The vulnerability causes memory corruption. Access to local resources is required to...

Astra Linux – Vulnerability in binutils

The finishstab function in stabs.c of the GNU Binutils 2.30 allows attackers to cause a denial of service heap-based buffer overflow or potentially have unspecified other impacts, as demonstrated by an out-of-bounds write of 8 bytes. This can occur during the execution of objdump...

Astra Linux – Vulnerability in binutils

A vulnerability was discovered in Binutils objdump prior to version 2.39.3. Attackers can exploit this vulnerability to cause a denial of service or other unspecified impacts through the function comparesymbols...

Astra Linux – Vulnerability in binutils

There is a flaw in binutils /bfd/pef.c. An attacker who can submit a crafted input file for processing by the objdump program could cause a null pointer dereference. The greatest threat of this flaw is to the availability of the application. This flaw affects binutils versions prior to 2.34...

Astra Linux – Vulnerability in binutils

The demangletemplate function in cplus-dem.c within GNU libiberty, as part of GNU Binutils 2.30, allows attackers to trigger excessive memory consumption also known as OOM during the “Create an array for saving the template argument values” XNEWVEC call. This can occur during the execution of...

Astra Linux – Vulnerability in binutils

The binutils version 2.32 and earlier contains an Integer Overflow vulnerability in objdump, bfdgetdynamicrelocupperbound, and bfdcanonicalizedynamicreloc. This vulnerability can lead to Integer Overflow, which in turn triggers Heap Overflow. Successful exploitation of this vulnerability allows f...

exploitarium

Statement This repo was incomplete when published. In regar...

exploitarium

Statement This repo was incomplete when published. In regar...

objdump-dlx-calc-poc

objdump dlx calc poc Small repro for an objdump -g crash-to...

CLSA-2026-1779266445 binutils: Fix of 4 CVEs

CVE-2026-3441: XCOFF linker XTYLD xscnlen out-of-bounds read - CVE-2026-3442: XCOFF linker rsymndx out-of-bounds read in objxcoffsymhashes - CVE-2025-7545: objcopy heap buffer overflow on --interleave with crafted small input - CVE-2025-5245: objdump SEGV / NULL deref in debugtypesamep and...

Astra Linux – Vulnerability in binutils

A issue was discovered in the Binary File Descriptor BFD library also known as libbfd, as distributed in GNU Binutils 2.31. A heap-based buffer overflow in the bfdgetl32 function in libbfd.c allows an attacker to cause a denial of service through a crafted PE file. This vulnerability can be...

GNU Binutils objdump bucomm.c display_info memory leak

...

CLSA-2026-1778237657 binutils: Fix of 4 CVEs

CVE-2025-5244: fix ld segfault on fuzzed object via NULL group head - CVE-2025-5245: fix segv in objdump debugtypesamep and debugwritetype on incomplete enum types - CVE-2026-3441: fix xcofflink XTYLD xscnlen out-of-bounds index - CVE-2026-3442: fix xcofflink rsymndx out-of-bounds sym hash index...