Skip to content
OpenAdvisories

Package · Debian

binutils

301 known vulnerabilities.

47 results · Clear filters · Feed

  • Medium 5.3

    GNU Binutils ELF String Table elf-strtab.c _bfd_elf_strtab_delref memory corruption

    A vulnerability was detected in GNU Binutils 2.47. The affected element is the function _bfd_elf_strtab_delref of the file bfd/elf-strtab.c of the component ELF String Table. The manipulation results in memory corruption. The attack requires a local approach.…

  • Medium 5.3

    GNU Binutils Section Merge merge.c _bfd_write_merged_section null pointer dereference

    A security vulnerability has been detected in GNU Binutils 2.47. Impacted is the function _bfd_write_merged_section of the file bfd/merge.c of the component Section Merge. The manipulation leads to null pointer dereference. The attack needs to be performed lo…

  • Medium 5.3

    GNU Binutils SHT_GROUP Section elf.c bfd_elf_set_group_contents null pointer dereference

    A weakness has been identified in GNU Binutils 2.47. This issue affects the function bfd_elf_set_group_contents of the file bfd/elf.c of the component SHT_GROUP Section Handler. Executing a manipulation can lead to null pointer dereference. The attack needs t…

  • Medium 5.3

    GNU Binutils ELF Orphan Section ldelf.c elf_orphan_compatible null pointer dereference

    A security flaw has been discovered in GNU Binutils 2.47. This vulnerability affects the function elf_orphan_compatible of the file ld/ldelf.c of the component ELF Orphan Section Handler. Performing a manipulation results in null pointer dereference. The atta…

  • Medium 4.8

    GNU Binutils Eh Frame Section elf-eh-frame.c _bfd_elf_write_section_eh_frame buffer overflow

    A vulnerability was detected in GNU Binutils 2.47. Affected by this issue is the function _bfd_elf_write_section_eh_frame of the file bfd/elf-eh-frame.c of the component Eh Frame Section Handler. Performing a manipulation of the argument cie_length/fde_length…

  • Medium 5.3

    GNU Binutils ld elf64-x86-64.c elf_x86_64_relocate_section buffer overflow

    A security vulnerability has been detected in GNU Binutils 2.47. Affected by this vulnerability is the function elf_x86_64_relocate_section of the file bfd/elf64-x86-64.c of the component ld. Such manipulation of the argument roff leads to buffer overflow. An…

  • Medium 4.4

    GNU Binutils ld libbfd.c bfd_putl64 null pointer dereference

    A weakness has been identified in GNU Binutils 2.47. Affected is the function bfd_putl64 of the file bfd/libbfd.c of the component ld. This manipulation causes null pointer dereference. The attack requires local access. The exploit has been made available to …

  • Medium 5.3

    GNU Binutils ld cache.c cache_bwrite buffer overflow

    A security flaw has been discovered in GNU Binutils 2.47. This impacts the function cache_bwrite of the file bfd/cache.c of the component ld. The manipulation of the argument nbytes results in buffer overflow. The attack requires a local approach. The exploit…

  • Medium 5.5

    Binutils: binutils: multiple use-after-free in add_archive_element via lto plugin processing

    Multiple Use-After-Free vulnerabilities were found in the add_archive_element function in ld/ldmain.c of the GNU linker (ld), a component of binutils. The root cause is that plugin_maybe_claim() in ld/plugin.c frees the original BFD object via bfd_close/_bfd_…

  • Medium 5.6

    Binutils: gnu binutils: heap-buffer-overflow in linker leads to information disclosure and denial of service

    A flaw was found in the GNU Binutils (Binary Utilities) linker. This vulnerability, a heap-buffer-overflow read (CWE-125), occurs when the linker processes a specially crafted 32-bit XCOFF (Extended Common Object File Format) object file. An attacker could ex…

  • Medium 5.5

    Binutils: binutils: denial of service vulnerabilities in readelf via crafted elf files

    A flaw was found in the `readelf` utility of the binutils package. A local attacker could exploit two Denial of Service (DoS) vulnerabilities by providing a specially crafted Executable and Linkable Format (ELF) file. One vulnerability, a resource exhaustion …

  • Medium 5.0

    Binutils: binutils: denial of service via crafted elf file

    A flaw was found in binutils, specifically within the `readelf` utility. This vulnerability allows a local attacker to cause a Denial of Service (DoS) by tricking a user into processing a specially crafted Executable and Linkable Format (ELF) file. The exploi…

  • Medium 6.1

    Binutils: out-of-bounds read in xcoff relocation processing in gnu binutils bfd library

    A flaw was found in the GNU Binutils BFD library, a widely used component for handling binary files such as object files and executables. The issue occurs when processing specially crafted XCOFF object files, where a relocation type value is not properly vali…

  • Medium 6.1

    Binutils: gnu binutils: information disclosure via specially crafted xcoff object file

    A flaw was found in GNU Binutils. This heap-based buffer overflow vulnerability, specifically an out-of-bounds read in the bfd linker, allows an attacker to gain access to sensitive information. By convincing a user to process a specially crafted XCOFF object…

  • Medium 6.1

    Binutils: gnu binutils: information disclosure or denial of service via out-of-bounds read in bfd linker

    A flaw was found in GNU Binutils. This vulnerability, a heap-based buffer overflow, specifically an out-of-bounds read, exists in the bfd linker component. An attacker could exploit this by convincing a user to process a specially crafted malicious XCOFF obje…

  • Medium 6.2

    GNU Binutils thru 2.45.1 readelf contains a denial-of-service vulnerability when processing a crafted binary with malfo…

  • Medium 6.2

    GNU Binutils thru 2.45.1 readelf contains a denial-of-service vulnerability when processing a crafted binary with malfo…

  • Medium 5.5

    GNU Binutils thru 2.46 readelf contains a null pointer dereference vulnerability when processing a crafted ELF binary w…

  • Medium 5.0

    An issue was discovered in Binutils before 2.46. The objdump contains a denial-of-service vulnerability when processing…

  • Medium 5.5

    Binutils objdump contains a denial-of-service vulnerability when processing a crafted binary with malformed DWARF debug…

  • Medium 5.5

    GNU Binutils thru 2.46 readelf contains a vulnerability that leads to an invalid pointer free when processing a crafted…

  • Medium 5.5

    Binutils objdump contains a denial-of-service vulnerability when processing a crafted binary with malformed DWARF debug…

  • Medium 6.2

    GNU Binutils thru 2.46 readelf contains a vulnerability that leads to an abort (SIGABRT) when processing a crafted ELF …

  • Medium 5.5

    An issue was discovered in function d_abi_tags in file cp-demangle.c in BinUtils 2.26 allows attackers to cause a denia…

  • Medium 5.5

    An issue was discovered in function d_print_comp_inner in file cp-demangle.c in BinUtils 2.26 allows attackers to cause…

  • Medium 5.3

    GNU Binutils Linker elfcode.h elf_swap_shdr heap-based overflow

    A vulnerability has been found in GNU Binutils 2.45. The affected element is the function elf_swap_shdr in the library bfd/elfcode.h of the component Linker. The manipulation leads to heap-based buffer overflow. The attack must be carried out locally. The exp…

  • Medium 5.3

    GNU Binutils Linker elf-eh-frame.c _bfd_elf_parse_eh_frame heap-based overflow

    A flaw has been found in GNU Binutils 2.45. Impacted is the function _bfd_elf_parse_eh_frame of the file bfd/elf-eh-frame.c of the component Linker. Executing manipulation can lead to heap-based buffer overflow. The attack is restricted to local execution. Th…

  • Medium 5.3

    GNU Binutils elf.c bfd_elf_set_group_contents out-of-bounds write

    A vulnerability, which was classified as problematic, has been found in GNU Binutils 2.45. Affected by this issue is the function bfd_elf_set_group_contents of the file bfd/elf.c. The manipulation leads to out-of-bounds write. It is possible to launch the att…

  • Medium 5.3
    CVE-2025-7545 Public exploit

    GNU Binutils objcopy.c copy_section heap-based overflow

    A vulnerability classified as problematic was found in GNU Binutils 2.45. Affected by this vulnerability is the function copy_section of the file binutils/objcopy.c. The manipulation leads to heap-based buffer overflow. Attacking locally is a requirement. The…

  • Medium 5.3

    GNU Binutils objdump debug.c debug_type_samep memory corruption

    A vulnerability classified as critical has been found in GNU Binutils up to 2.44. This affects the function debug_type_samep of the file /binutils/debug.c of the component objdump. The manipulation leads to memory corruption. Local access is required to appro…

  • Medium 5.3

    GNU Binutils ld elflink.c elf_gc_sweep memory corruption

    A vulnerability was found in GNU Binutils up to 2.44. It has been rated as critical. Affected by this issue is the function elf_gc_sweep of the file bfd/elflink.c of the component ld. The manipulation leads to memory corruption. An attack has to be approached…

  • Medium 5.0

    GNU Binutils ld elflink.c bfd_elf_reloc_symbol_deleted_p memory corruption

    A vulnerability, which was classified as critical, was found in GNU Binutils 2.43. Affected is the function bfd_elf_reloc_symbol_deleted_p of the file bfd/elflink.c of the component ld. The manipulation leads to memory corruption. It is possible to launch the…

  • Medium 5.0

    GNU Binutils ld elflink.c _bfd_elf_gc_mark_rsec memory corruption

    A vulnerability classified as critical was found in GNU Binutils 2.43. This vulnerability affects the function _bfd_elf_gc_mark_rsec of the file bfd/elflink.c of the component ld. The manipulation leads to memory corruption. The attack can be initiated remote…

  • Medium 5.0

    GNU Binutils ld libbfd.c bfd_putl64 memory corruption

    A vulnerability was found in GNU Binutils 2.43. It has been rated as critical. Affected by this issue is the function bfd_putl64 of the file bfd/libbfd.c of the component ld. The manipulation leads to memory corruption. The attack may be launched remotely. Th…

  • Medium 5.6

    GNU Binutils ld libbfd.c bfd_putl64 memory corruption

    A vulnerability was found in GNU Binutils 2.43. It has been declared as problematic. Affected by this vulnerability is the function bfd_putl64 of the file libbfd.c of the component ld. The manipulation leads to memory corruption. The attack can be launched re…

  • Medium 5.0

    GNU Binutils ld elflink.c _bfd_elf_gc_mark_rsec heap-based overflow

    A vulnerability was found in GNU Binutils 2.43 and classified as critical. This issue affects the function _bfd_elf_gc_mark_rsec of the file elflink.c of the component ld. The manipulation leads to heap-based buffer overflow. The attack may be initiated remot…

  • Medium 5.0

    GNU Binutils objdump.c disassemble_bytes stack-based overflow

    A vulnerability, which was classified as problematic, was found in GNU Binutils up to 2.43. This affects the function disassemble_bytes of the file binutils/objdump.c. The manipulation of the argument buf leads to stack-based buffer overflow. It is possible t…

  • Medium 5.5

    https://www.gnu.org/software/binutils/ nm >=2.43 is affected by: Incorrect Access Control. The type of exploitation is:…

  • Medium 6.3

    Out of bounds read in parse_module function in bfd/vms-alpha.c

    An out-of-bounds read flaw was found in the parse_module function in bfd/vms-alpha.c in Binutils.

  • Medium 4.7

    Field `file_table` of `struct module *module` is uninitialized

    A flaw was found in Binutils. The use of an uninitialized field in the struct module *module may lead to application crash and local denial of service.