CVE-2006-2362

CVE-2006-2362 is a buffer overflow in getsym in tekhex.c of libbfd (GNU Binutils) used by strings. Reported as exploitable to crash the application and possibly execute arbitrary code via a TekHex file with an invalid length character. Connected advisories (SUSE, Ubuntu USN-292-1, OpenVAS entries...

CVE-2017-9745

The CVE-2017-9745 issue affects GNU Binutils libbfd (Binutils 2.28) in the BFD implementation. The vulnerability is in the _bfd_vms_slurp_etir function (bfd/vms-alpha.c), where handling of a crafted vms file during objdump -D can cause a denial of service via a buffer overflow, potentially impact...

CVE-2026-91780

GNU Binutils 2.47 contains a null pointer dereference in the elf_link_add_object_symbols function within bfd/elflink.c. Triggering this flaw requires a local attack with low privileges, resulting in a potential availability impact (crash/denial of service). A proof-of-concept exploit is publicly ...

CVE-2025-11081

CVE-2025-11081 pertains to GNU Binutils 2.45, specifically the dump_dwarf_section function in binutils/objdump.c. The issue allows a local attacker to trigger an out-of-bounds read, with exploit details publicly available. A patch is available (hash f87a66db645caf8cc0e6fc87b0c28c78a38af59b) and u...

CVE-2026-91779

GNU Binutils 2.47 is affected by a null pointer dereference in the function _bfd_elf_eh_frame_section_offset within the Eh Frame Handler component (bfd/elf-eh-frame.c). The flaw is exploitable via a local attack and primarily impacts availability (low severity, CVSS 3.1 base score 3.3). A proof-o...

CVE-2025-8224

CVE-2025-8224 affects GNU Binutils 2.44, specifically the BFD Library’s function bfd_elf_get_str_section in bfd/elf.c. The issue can cause a null pointer dereference and requires local access to exploit. Public exploit information exists. A patch is available (patch id: db856d41004301b3a56438efd9...

CVE-2025-69650

CVE-2025-69650 affects GNU Binutils up to version 2.46, specifically the readelf tool. The vulnerability arises during GOT relocation handling: dump_relocations may return early and fail to initialize the all_relocations array, causing process_got_section_contents() to pass an uninitialized r_sym...

CVE-2025-66863

A flaw in the d_discriminator function within the cp-demangle.c file of BinUtils (specifically version 2.26) allows for a denial of service (DoS) . Attackers can exploit this by providing a specially crafted Portable Executable (PE) file , which can cause the affected application to become unavai...

CVE-2025-11494

The CVE-2025-11494 entry corresponds to GNU Binutils 2.45. The vulnerability affects the linker component, specifically the function _bfd_x86_elf_late_size_sections in bfd/elfxx-x86.c, causing an out-of-bounds read. Exploitation requires local access, and public exploitation details exist. A patc...

CVE-2026-91781

A null pointer dereference in the ELF Section Handler component of GNU Binutils 2.47 , specifically in the function elf_x86_64_common_section_index within bfd/elf64-x86-64.c, allows a local attacker with low privileges to crash the application, resulting in low availability impact . The exploit i...

CVE-2025-69652

The GNU Binutils readelf tool (versions through 2.46 ) is vulnerable to a denial-of-service (DoS) condition. The root cause is incomplete state cleanup in the process_debug_info() function, which allows an invalid debug_info_p state to propagate into DWARF attribute parsing routines. When process...

CVE-2025-66866

CVE-2025-66866 affects BinUtils 2.26. The issue is in the function d_abi_tags in cp-demangle.c and could allow a denial of service via a crafted PE file. NVD lists CVSSv3.1 scores (base 7.5 HIGH; AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H). Remediation guidance appears in Red Hat Advisory: avoid process...

CVE-2025-7546

CVE-2025-7546 affects GNU Binutils 2.45. The vulnerable component is the function bfd_elf_set_group_contents in the file bfd/elf.c , where input data length/size handling can trigger a heap/out-of-bounds write . Local attacker access is required. The exploit has been disclosed publicly. A patch i...

CVE-2025-66864

CVE-2025-66864 affects Binutils 2.26, where the d_print_comp_inner function in cp-demangle.c misbehaves when processing crafted PE files, causing denial of service through a crash. The connected sources confirm the vulnerable component and the crash impact but do not provide concrete exploit deta...

CVE-2025-66865

A stack overflow vulnerability exists in the d_print_comp_inner function within the cp-demangle.c file of BinUtils 2.26 . An attacker can exploit this flaw by processing a specially crafted PE file using the cxxfilt utility, which can trigger a crash and result in a denial of service (DoS) . This...

CVE-2025-11412

CVE-2025-11412 affects GNU Binutils 2.45, specifically the function bfd_elf_gc_record_vtentry in bfd/elflink.c of the linker. The issue enables an out-of-bounds read and requires local access. The exploit has been disclosed publicly. A patch identifier is listed: 047435dd988a3975d40c6626a8f739a0b...

CVE-2025-8225

The CVE-2025-8225 issue affects GNU Binutils 2.44, specifically the function process_debug_info in binutils/dwarf.c of the DWARF Section Handler. The vulnerability results in a memory leak and requires local access to exploit. A patch is identified by the commit hash e51fdff7d2e538c0e5accdd65649a...

CVE-2026-4647

The CVE-2026-4647 issue affects the GNU Binutils BFD library when handling XCOFF object files. A relocation type value is not properly validated before use, allowing an out-of-bounds read. This can cause tools that process XCOFF binaries to crash or expose unintended memory contents, leading to d...

CVE-2025-69644

A denial-of-service vulnerability exists in Binutils versions prior to 2.46 . The issue resides in the objdump utility, where a logic flaw in handling DWARF location list headers can be triggered by processing a crafted binary with malformed debug information. This flaw causes objdump to enter an...

CVE-2025-11495

CVE-2025-11495 affects GNU Binutils 2.45. The vulnerable element is the linker’s elf_x86_64_relocate_section function in elf64-x86-64.c, where manipulation can cause a heap-based buffer overflow. Impact is local, with publicly disclosed exploit. A patch is available (patch name: 6b21c8b2ecfef5c95...

CVE-2026-6844

CVE-2026-6844 affects the readelf utility in the binutils package. A crafted ELF file can trigger two DoS conditions: (1) resource exhaustion leading to out-of-memory and (2) a null pointer dereference causing a segmentation fault. Both can render readelf unresponsive or crash, resulting in denia...

CVE-2025-69645

The binutils objdump utility is vulnerable to a denial-of-service condition when processing a crafted binary containing malformed DWARF debug information . A logic error in handling DWARF compilation units allows an invalid offset_size value to be used within the byte_get_little_endian function, ...

CVE-2025-11413

CVE-2025-11413 : In GNU Binutils 2.45, the vulnerability affects the linker component, specifically the function elf_link_add_object_symbols in bfd/elflink.c, which may cause an out-of-bounds read. The issue requires local access to exploit, and an exploit has been made public. A fix is available...

CVE-2026-6845

CVE-2026-6845 : A flaw in binutils/readelf allows a local attacker to trigger a Denial of Service by processing a specially crafted ELF file. The vulnerability arises during ELF processing and can cause the host to become unresponsive due to excessive resource consumption or a program crash. CVSS...

CVE-2026-90829

GNU Binutils 2.47 is affected by a null pointer dereference in the function bfd_elf_set_group_contents within the file bfd/elf.c , part of the SHT_GROUP Section Handler component. The flaw is triggered by local manipulation and results in low impact on confidentiality, integrity, and availability...

CVE-2025-11414

GNU Binutils 2.45 contains a local vulnerability in the linker’s bfd/elflink.c get_link_hash_entry function that allows an out-of-bounds read. The issue, disclosed publicly, is mitigated by upgrading to Binutils 2.46. A patch was identified (aeaaa9af6359c8e394ce9cf24911fec4f4d23703). Affected pro...

CVE-2025-69647

The GNU Binutils suite, specifically the readelf utility in versions through 2.45.1 , is vulnerable to a denial-of-service (DoS) condition. A logic flaw exists in the DWARF parsing code where processing a crafted binary with malformed DWARF loclists data causes the utility to enter an unbounded o...

CVE-2026-90804

A buffer overflow (specifically a heap out-of-bounds write via a negative-size memmove) exists in GNU Binutils 2.47 , in the function _bfd_elf_write_section_eh_frame within bfd/elf-eh-frame.c (Eh Frame Section Handler). Triggering the flaw requires a malformed .eh_frame section and manipulation o...

CVE-2025-66861

A flaw in BinUtils 2.26 allows an out-of-bounds read in the d_unqualified_name function located in the cp-demangle.c file. Processing a specially crafted PE file with the cxxfilt tool can trigger this vulnerability, leading to a crash and a subsequent denial of service . No specific mitigation op...

CVE-2025-69648

The GNU Binutils development tool, specifically the readelf utility, is vulnerable to a denial-of-service (DoS) condition in versions up to and including 2.45.1 . The root cause is a logic flaw in the DWARF parsing path when processing a crafted binary containing malformed .debug_rnglists data. T...

CVE-2026-90828

A null pointer dereference vulnerability in GNU Binutils 2.47 , specifically in the function elf_orphan_compatible within the file ld/ldelf.c (ELF Orphan Section Handler component), allows a local attacker to cause a denial of service with partial impact on confidentiality and integrity. A public...

CVE-2026-90802

GNU Binutils 2.47 is affected by a null pointer dereference in the function bfd_putl64 within the file bfd/libbfd.c , part of the ld (linker) component. The vulnerability requires local access and carries a MEDIUM severity (CVSS 3.1 base score 4.4). A proof-of-concept exploit has been made public...

CVE-2026-90830

A null pointer dereference vulnerability was identified in GNU Binutils 2.47 , specifically in the function _bfd_write_merged_section within the file bfd/merge.c (component: Section Merge). The attack requires local access with low privileges. The exploit has been publicly disclosed as a proof-of...

CVE-2025-69646

The binutils project's objdump utility contains a denial-of-service vulnerability caused by a logic error when processing malformed DWARF debug_rnglists data. A local attacker can provide a specially crafted binary that triggers an unbounded logging loop , causing the process to repeatedly print ...

CVE-2026-90801

A buffer overflow vulnerability was identified in GNU Binutils 2.47 , specifically in the function cache_bwrite within bfd/cache.c of the ld (linker) component. Manipulation of the nbytes argument triggers the overflow. The attack vector is local , requiring low privileges and no user interaction...

CVE-2026-90831

A memory corruption vulnerability was identified in GNU Binutils 2.47 , specifically in the function _bfd_elf_strtab_delref within the file bfd/elf-strtab.c of the ELF String Table component. The flaw is triggered through local manipulation and can lead to partial compromise of confidentiality, i...

CVE-2026-90803

GNU Binutils 2.47 is affected by a buffer overflow in the function elf_x86_64_relocate_section (file bfd/elf64-x86-64.c , component ld ). The vulnerability is triggered by manipulation of the argument roff via a malformed relocation , leading to heap out-of-bounds read/write and a segmentation fa...

CVE-2026-91782

GNU Binutils 2.47 is affected by a null pointer dereference in the function elf_x86_allocate_dynrelocs within bfd/elfxx-x86.c, part of the Dynamic Relocation Allocation component. The flaw is triggered through a local attack path with low complexity and low privileges required, resulting in a lim...