CVE-2020-35496

There’s a flaw in bfd_pef_scan_start_address() of bfd/pef.c in binutils
which could allow an attacker who is able to submit a crafted file to be
processed by objdump to cause a NULL pointer dereference. The greatest
threat of this flaw is to application availability. This flaw affects
binutils versions prior to 2.34.

Bugs

• <https://sourceware.org/bugzilla/show_bug.cgi?id=25308&gt;
• <https://bugzilla.redhat.com/show_bug.cgi?id=1911444&gt;

Notes