CVE-2022-47011

CVE-2022-47011 affects Binutils with a memory-leak related DoS in parse_stab_struct_fields (stabs.c) for Binutils 2.34–2.38. The connected documents confirm the issue is a memory-leak DoS vulnerability impacting Binutils, with multiple advisories referencing the same function as the root cause. E...

CVE-2014-8484

GNU Binutils libbfd contains a vulnerability in srec_scan (bdf/srec.c) that allows a remote attacker to cause a denial of service (out-of-bounds read) by supplying a crafted small S-record. Affected product: GNU Binutils (libbfd). Root cause: memory safety flaw in srec_scan; the issue exists in b...

CVE-2020-19724

CVE-2020-19724: A memory consumption issue in get_data (binutils/nm.c) affects GNU nm prior to 2.34, enabling denial of service via crafted input. The primary technical detail is a memory‑based DoS in the get_data path of nm for nm.c; impact is a DoS condition. The Initial Description and connect...

CVE-2017-14128

CVE-2017-14128 affects the GNU Binutils libbfd/Dwarf2 decoding: the decode_line_info function in dwarf2.c may be abused via a crafted ELF file to cause a heap-based buffer over-read and application crash (DENIAL OF SERVICE). Affected is Binutils 2.29 (BFD/libbfd). The provided documents do not sp...

CVE-2017-9040

Technical details about CVE-2017-9040 are not provided in the connected documents. No explicit product/version/fix data beyond the initial description is available here. Monitor for updates.

CVE-2017-9750

CVE-2017-9750 affects opcodes/rx-decode.opc in GNU Binutils 2.28. The vulnerability arises from missing bounds checks for certain scale arrays, enabling a crafted binary file to trigger a denial of service (buffer overflow and application crash) during objdump -D, with possible other impact. A co...

CVE-2025-1176

Affected software : GNU Binutils 2.43, specifically the ld component and the function _bfd_elf_gc_mark_rsec in elflink.c. Vulnerability : heap-based buffer overflow. Impact/conditions : may be exploited remotely; attack complexity is high; privileges required: none; user interaction required. Exp...

CVE-2017-7299

CVE-2017-7299 affects GNU Binutils 2.28’s Binary File Descriptor library (libbfd). The vulnerability arises when emitting relocations: bfd_elf_final_link in bfd/elflink.c reads the ELF reloc section header without validating the input file format, leading to an invalid read of size 8 and causing ...

CVE-2017-12458

CVE-2017-12458 affects GNU Binutils libbfd (nlm_swap_auxiliary_headers_in in bfd/nlmcode.h). As distributed in Binutils 2.29 and earlier, it allows a remote attacker to cause an out-of-bounds heap read via a crafted nlm file. The vulnerability is tied to the nlm_swap_auxiliary_headers_in routine ...

CVE-2017-15023

The CVE-2017-15023 issue affects GNU Binutils 2.29 (Binary File Descriptor libbfd). Specifically, read_formatted_entries in dwarf2.c mishandles the format count, allowing a crafted ELF file to trigger a denial of service via a NULL pointer dereference related to concat_filename. This vulnerabilit...

CVE-2025-1147

CVE-2025-1147 refers to a buffer overflow in GNU Binutils 2.43, specifically in nm.c:__sanitizer::internal_strlen. Connected advisories indicate the fix is in Binutils 2.45, with openSUSE/SUSE advisories recommending upgrading to 2.45 (and related patch content). The vulnerability is exploitable ...

CVE-2017-15021

CVE-2017-15021 affects GNU Binutils’ Binary File Descriptor library (libbfd). The issue is in bfd_get_debug_link_info_1 (opncls.c) and arises from a crafted ELF file, enabling a heap-based buffer over-read that can crash the application. The description specifies Binutils 2.29 as affected; no exp...

CVE-2017-7210

CVE-2017-7210 affects GNU Binutils 2.28. The objdump tool (and related Binutils components) is vulnerable to multiple heap-based buffer over-reads when processing crafted object files with corrupted STABS enum type strings, potentially causing a crash. The description indicates the vulnerability ...

CVE-2019-9076

CVE-2019-9076: In GNU Binutils’ Binary File Descriptor library (libbfd) distributed with Binutils 2.32, elf_read_notes in elf.c permits an excessive memory allocation. Connected advisories document the vulnerability in Binutils 2.32 and reference downstream fixes. The EulerOS/Gentoo GLSA entries ...

CVE-2025-1151

CVE-2025-1151 concerns GNU Binutils 2.43, where the memory leak originates in ld’s xmemdup.c (function xmemdup). The vulnerability can be triggered remotely and is described as high attack complexity with a disclosed exploit. Several connected advisories document a patch path: openSUSE/SUSE advis...

CVE-2017-9756

CVE-2017-9756 affects GNU Binutils 2.28. The vulnerability lies in the aarch64_ext_ldst_reglist function (opcodes/aarch64-dis.c) where mishandling of a crafted binary file during objdump -D can lead to a denial of service through a buffer overflow and application crash. This CVE is demonstrated v...

CVE-2019-9072

CVE-2019-9072 affects the GNU Binutils Binary File Descriptor library (libbfd) shipped with Binutils 2.32. The issue is an attempted excessive memory allocation in setup_group() within elf.c, which can enable a denial-of-service through memory exhaustion when processing ELF files. Public advisori...

CVE-2025-1179

GNU Binutils 2.43 contains a memory corruption vulnerability in the ld component, specifically in the bfd_putl64 function of bfd/libbfd.c. The issue can be triggered remotely and is characterized by high attack complexity and the possibility of exploitation being disclosed publicly. Upgrading to ...

CVE-2017-9744

Technical details for CVE-2017-9744 are not publicly available in the provided documents; monitor for updates.

CVE-2017-9749

CVE-2017-9749 affects GNU Binutils 2.28. the vulnerable component is the regs macros in opcodes/bfin-dis.c. A crafted binary can be mishandled during objdump -D, causing a buffer overflow that may crash the application and potentially lead to unspecified impact. The description notes a remote att...

CVE-2017-9955

CVE-2017-9955 affects GNU Binutils 2.28 (libbfd) via the get_build_id function in opncls.c. A crafted file with a large size field relative to data can trigger a heap-based buffer over-read in objdump, leading to a denial of service. The initial description specifies Binutils 2.28 and a heap-base...

CVE-2018-9138

CVE-2018-9138 affects GNU Binutils’ libiberty code, specifically cplus-dem.c, with stack exhaustion caused by recursive C++ demangling frames (demangle_nested_args, demangle_args, do_arg, do_type) in GNU Binutils 2.29 and 2.30. Connected documents reference this issue and indicate a fix has been ...

CVE-2017-12455

Technical details for CVE-2017-12455 are not provided in the connected documents. Monitor for updates; no new/public details are available here.

CVE-2017-6965

CVE-2017-6965 affects readelf in GNU Binutils 2.28. Processing corrupted input files containing symbol-difference relocations can cause writes to illegal addresses, leading to a heap-based buffer overflow. The description specifies the vulnerable component (readelf) and version (Binutils 2.28) an...

CVE-2017-8421

The CVE-2017-8421 issue affects GNU Binutils' Binary File Descriptor (libbfd) component, specifically the coff_set_alignment_hook function in coffcode.h used with Binutils 2.28. It describes a memory leak vulnerability that can cause memory exhaustion in objdump when parsing a crafted PE file. Th...

CVE-2017-9041

Technical details for CVE-2017-9041 are not publicly provided in the connected documents. The materials reference Binutils 2.28 and MIPS GOT handling but do not specify affected versions beyond 2.28, exploit vectors, or fixes. Monitor for updates.

CVE-2025-1181

GNU Binutils 2.43 contains a memory corruption vulnerability in ld: the function _bfd_elf_gc_mark_rsec in bfd/elflink.c is affected, enabling a remote exploit with high attack complexity as per CVSS-derived notes. The exposure is linked to memory corruption in the ld component, and a patch is ref...

CVE-2017-12449

CVE-2017-12449 affects the GNU Binutils libbfd component. The vulnerability exists in _bfd_vms_save_sized_string (vms-misc.c) and allows a remote attacker to trigger an out-of-bounds heap read by supplying a crafted vms file. The CVE is associated with Binutils 2.29 and earlier; newer versions ar...

CVE-2017-12454

CVE-2017-12454 affects the Binary File Descriptor (BFD) library (libbfd) in GNU Binutils up to version 2.29. The _bfd_vms_slurp_egsd function in bfd/vms-alpha.c can be triggered by a crafted VMS Alpha file to cause an arbitrary memory read. This entry (CVE-2017-12454) is corroborated by connected...

CVE-2017-14745

The CVE-2017-14745 vulnerability affects GNU Binutils’ Binary File Descriptor library (libbfd) in Binutils 2.29. The issue arises because the _get_synthetic_symtab functions treat -1 as a sorting count rather than an error flag, enabling crafted ELF files to trigger denial of service via an integ...

CVE-2017-15022

CVE-2017-15022 affects the Binary File Descriptor (BFD) library in GNU Binutils 2.29. The root cause is that dwarf2.c does not validate the DW_AT_name data type during parsing, which enables a crafted ELF file to trigger a denial of service through a NULL pointer dereference or out-of-bounds acce...

CVE-2017-7225

CVE-2017-7225 affects GNU Binutils 2.28 (addr2line). The bug is a NULL pointer dereference triggered when both the main file name and directory name are empty, leading to an invalid write and a crash. The connected Nessus entries publicly document this exact description and note it as an unpatche...

CVE-2018-17794

CVE-2018-17794 affects GNU Binutils/libiberty (cplus-dem.c) where a NULL pointer dereference in work_stuff_copy_to_from can be triggered when called from iterate_demangle_function. The issue is tied to Binutils 2.31; the provided documents describe the vulnerability and target the demangling work...

CVE-2025-1180

The CVE-2025-1180 issue affects GNU Binutils 2.43, specifically the _bfd_elf_write_section_eh_frame function in bfd/elf-eh-frame.c used by ld. It causes memory corruption and can be triggered remotely; attack complexity is high, and exploitation is possible after disclosure. The available sources...

CVE-2017-12456

CVE-2017-12456 affects GNU Binutils 2.29 and earlier. The read_symbol_stabs_debugging_info function in rddbg.c allows a remote attacker to cause an out-of-bounds heap read via a crafted binary file. This is documented in the connected Nessus/Red Hat entries, which explicitly list CVE-2017-12456 a...

CVE-2017-13710

CVE-2017-13710 affects GNU Binutils libbfd (Binary File Descriptor) with the setup_group function in elf.c. The vulnerability allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a group section that is too small. The description and connected Nessus entri...

CVE-2017-7302

CVE-2017-7302 affects the Binary File Descriptor (BFD) library (libbfd) bundled with GNU Binutils 2.28. It describes an invalid read (size 4) in swap_std_reloc_out due to missing checks for unrecognised relocs, which can cause Binutils utilities like strip to crash. The provided documents do not ...

CVE-2017-8396

CVE-2017-8396 affects the Binary File Descriptor (BFD) library (libbfd) in GNU Binutils 2.28. It allows an invalid read of size 1 due to reloc offset range tests not catching small negative offsets, causing crash in binary-analysis tools such as objdump. The vulnerability is tied to libbfd’s hand...

CVE-2025-1182

CVE-2025-1182 affects GNU Binutils 2.43, specifically the ld component; the memory corruption is triggered by bfd_elf_reloc_symbol_deleted_p in bfd/elflink.c. The vulnerability is remote-exploitable with high attack complexity, and public exploitation is noted. A patch is available (patch id: b42...

CVE-2017-12448

CVE-2017-12448 affects the GNU Binutils libbfd: the bfd_cache_close path in bfd/cache.c can cause a heap use-after-free and potentially code execution when processing a crafted nested archive. Root cause is incorrect function calls during memory release; the vendor’s note cites insufficient input...

CVE-2017-9755

CVE-2017-9755 affects GNU Binutils 2.28. The opcodes/i386-dis.c handling for bnd mode does not properly account for the number of registers, enabling a crafted binary to cause a denial of service (buffer overflow and application crash) during objdump -D. No explicit patch/version fix is provided ...

CVE-2017-14932

Technical details beyond the initial description are not provided in the connected documents. No vendor, product, or version specifics, impact, or remediation are included—monitor for updates.

CVE-2017-8393

CVE-2017-8393 affects GNU Binutils’ Binary File Descriptor library (libbfd) as distributed in Binutils 2.28. The flaw stems from an assumption in code paths used by objcopy and strip that SHT_REL/SHR_RELA sections always begin with .rel/.rela, causing a global buffer over-read and a crash in tool...

CVE-2025-69649

CVE-2025-69649 affects GNU Binutils up to version 2.46 (readelf). A vulnerability in relocation processing can pass an invalid or null section pointer to display_relocations(), causing a null pointer dereference that leads to a segmentation fault (SIGSEGV) and process termination. The available s...

CVE-2017-15025

CVE-2017-15025 affects GNU Binutils (libbfd) as distributed with Binutils 2.29. The vulnerability is in decode_line_info within dwarf2.c and can be exploited via a crafted ELF file to trigger a divide-by-zero and crash the application, constituting a denial of service. The connected documents (in...

CVE-2017-7224

CVE-2017-7224: In GNU Binutils 2.28, the find_nearest_line function in objdump is vulnerable to an invalid write of size 1 while disassembling a corrupt binary containing an empty function name, causing a program crash. The description specifies the affected component (GNU Binutils, objdump) and ...

CVE-2017-9754

Technical details about CVE-2017-9754 are not provided in the supplied documents. Public details appear limited to the initial description; no vendor/product/version specifics or remediation are included. Monitor for updates as additional sources may publish details.

CVE-2025-11083

CVE-2025-11083 affects GNU Binutils 2.45, specifically the linker component. The vulnerability is a heap-based overflow in the elf_swap_shdr function (bfd/elfcode.h) that requires local access to exploit. The advisory notes a patch was prepared and indicates fixes were made in version 2.46. Publi...

CVE-2025-11840

GNU Binutils 2.45 contains a vulnerability in the vfinfo function of ldmisc.c that can cause an out‑of‑bounds read. The issue is exploitable locally, and the exploit has been publicly released. A patch is referenced as 16357 and applying it is the recommended remediation. The vulnerability is not...

CVE-2017-12450

CVE-2017-12450 concerns the GNU Binutils libbfd component, specifically the alpha_vms_object_p path in vms-alpha.c. The advisory text in the connected sources confirms an out-of-bounds heap write vulnerability exploitable via crafted vms alpha files, which could lead to code execution. The affect...