peframe

======= peframe peframe is a open source tool to perform static analysis on Portable Executable malware and generic suspicious file. It can help malware researchers to detect packer, xor, digital signature, mutex, anti debug, anti virtual machine, suspicious sections and functions, macro and much...

Astra Linux – vulnerability in binutils

There is a flaw in bfdpefscanstartaddress within bfd/pef.c in binutils; it may allow an attacker capable of submitting a specially crafted file to have it processed by objdump, resulting in a NULL pointer dereference. The primary risk posed by this flaw is application availability. It affects...

Astra Linux – vulnerability in binutils

There is a flaw in binutils /bfd/pef.c. An attacker capable of submitting a specially crafted input file for processing by the objdump program could trigger a null pointer dereference. The primary risk posed by this flaw is application availability. It affects binutils versions prior to 2.34...

Astra Linux – Vulnerability in binutils

There is a flaw in the binutils within bfd/pef.c. An attacker who can submit a crafted PEF file for parsing by objdump could cause a heap buffer overflow, leading to out-of-bounds reads, which could result in a disruption to the application’s functionality. This flaw affects binutils versions pri...

CVE-2026-81880

A flaw was found in radare2. The Apple Preferred Executable Format PEF loader in radare2 is vulnerable to uncontrolled resource consumption. A remote attacker could exploit this by providing a specially crafted Apple PEF file. The PEF loader accepts relocSecCount values that are not properly...

CVE-2026-81880

radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's Apple Preferred Executable Format loader was vulnerable because the PEF loader accepted relocSecCount values that were not bounded by the number of sections or complete relocation records in t...

CVE-2026-81880 radare2: Uncontrolled resource consumption in radare2 PEF loader

radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's Apple Preferred Executable Format loader was vulnerable because the PEF loader accepted relocSecCount values that were not bounded by the number of sections or complete relocation records in t...

CVE-2026-81880 radare2: Uncontrolled resource consumption in radare2 PEF loader

radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's Apple Preferred Executable Format loader was vulnerable because the PEF loader accepted relocSecCount values that were not bounded by the number of sections or complete relocation records in t...

EUVD-2026-84467

radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's Apple Preferred Executable Format loader was vulnerable because the PEF loader accepted relocSecCount values that were not bounded by the number of sections or complete relocation records in t...

CVE-2026-81880

radare2 , a UNIX-like reverse engineering framework, is affected by an uncontrolled resource consumption flaw in its Apple Preferred Executable Format (PEF) loader . Prior to 6.2.0 , the loader accepted relocSecCount values not bounded by the actual number of sections or complete relocation recor...

CVE-2026-81880 radare2: Uncontrolled resource consumption in radare2 PEF loader

radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's Apple Preferred Executable Format loader was vulnerable because the PEF loader accepted relocSecCount values that were not bounded by the number of sections or complete relocation records in t...

PT-2026-96776

Name of the Vulnerable Software and Affected Versions radare2 versions prior to 6.2.0 Description The Apple Preferred Executable Format PEF loader fails to properly bound relocSecCount values against the number of sections or complete relocation records in the input. This issue is triggered durin...

EUVD-2010-0538

Malware in sbrugna...

EUVD-2020-23162

Malware in sbrugna...

EUVD-2011-1070

Malware in sbrugna...

Linux Distros Unpatched Vulnerability : CVE-2020-35493

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw exists in binutils in bfd/pef.c. An attacker who is able to submit a crafted PEF file to be parsed by objdump could cause a heap buffer overflow -...

GNU Binutils Development Environment DoS

The vulnerability of the /bfd/pef.c component of the GNU Binutils development environment is related to pointer arithmetic errors. Exploiting this vulnerability allows an attacker, operating remotely, to cause a service failure through the use of a specially created file...

SUSE CVE-2020-35493

A flaw exists in binutils in bfd/pef.c. An attacker who is able to submit a crafted PEF file to be parsed by objdump could cause a heap buffer overflow - out-of-bounds read that could lead to an impact to application availability. This flaw affects binutils versions prior to 2.34...

SUSE CVE-2020-35507

There's a flaw in bfdpefparsefunctionstubs of bfd/pef.c in binutils in versions prior to 2.34 which could allow an attacker who is able to submit a crafted file to be processed by objdump to cause a NULL pointer dereference. The greatest threat of this flaw is to application availability...

binutils:fuzz_objcopy: Heap-buffer-overflow in bfd_pef_parse_traceback_table

Detailed Report: https://oss-fuzz.com/testcase?key=5405529373802496 Project: binutils Fuzzing Engine: afl Fuzz Target: fuzzobjcopy Job Type: aflasanbinutils Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x61d000000990 Crash State: bfdpefparsetracebacktable...