CVE-2021-3549 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Binutils
Severity
7.1HIGHNVD
EPSS
0.3%
top 42.83%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedMay 26
Latest updateMay 24
Description
An out of bounds flaw was found in GNU binutils objdump utility version 2.36. An attacker could use this flaw and pass a large section to avr_elf32_load_records_from_section() probably resulting in a crash or in some cases memory corruption. The highest threat from this vulnerability is to integrity as well as system availability.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:HExploitability: 1.8 | Impact: 5.2
Affected Packages3 packages
Patches
🔴Vulnerability Details
3GHSA▶
GHSA-p2w9-g2w7-8fw9: An out of bounds flaw was found in GNU binutils objdump utility version 2↗2022-05-24
CVEList
▶
OSV
▶