Gnu Binutils vulnerabilities

CVE-2022-47011 [MEDIUM] CWE-401 CVE-2022-47011: An issue was discovered function parse_stab_struct_fields in stabs.c in Binutils 2.34 thru 2.38, all An issue was discovered function parse_stab_struct_fields in stabs.c in Binutils 2.34 thru 2.38, allows attackers to cause a denial of service due to memory leaks.

CVE-2022-47010 [MEDIUM] CWE-401 CVE-2022-47010: An issue was discovered function pr_function_type in prdbg.c in Binutils 2.34 thru 2.38, allows atta An issue was discovered function pr_function_type in prdbg.c in Binutils 2.34 thru 2.38, allows attackers to cause a denial of service due to memory leaks.

CVE-2022-47007 [MEDIUM] CWE-401 CVE-2022-47007: An issue was discovered function stab_demangle_v3_arg in stabs.c in Binutils 2.34 thru 2.38, allows An issue was discovered function stab_demangle_v3_arg in stabs.c in Binutils 2.34 thru 2.38, allows attackers to cause a denial of service due to memory leaks.

CVE-2022-35205 [MEDIUM] CWE-617 CVE-2022-35205: An issue was discovered in Binutils readelf 2.38.50, reachable assertion failure in function display An issue was discovered in Binutils readelf 2.38.50, reachable assertion failure in function display_debug_names allows attackers to cause a denial of service.

CVE-2025-1152 [LOW] CWE-401 CVE-2025-1152: A vulnerability classified as problematic has been found in GNU Binutils 2.43. Affected is the funct A vulnerability classified as problematic has been found in GNU Binutils 2.43. Affected is the function xstrdup of the file xstrdup.c of the component ld. The manipulation leads to memory leak. It is possible to launch the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclos

CVE-2023-25588 [MEDIUM] CWE-457 CVE-2023-25588: A flaw was found in Binutils. The field `the_bfd` of `asymbol`struct is uninitialized in the `bfd_ma A flaw was found in Binutils. The field `the_bfd` of `asymbol`struct is uninitialized in the `bfd_mach_o_get_synthetic_symtab` function, which may lead to an application crash and local denial of service.

CVE-2025-1180 [LOW] CWE-119 CVE-2025-1180: A vulnerability classified as problematic has been found in GNU Binutils 2.43. This affects the func A vulnerability classified as problematic has been found in GNU Binutils 2.43. This affects the function _bfd_elf_write_section_eh_frame of the file bfd/elf-eh-frame.c of the component ld. The manipulation leads to memory corruption. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The exploitability is told to

CVE-2026-91779 [LOW] CWE-404 CVE-2026-91779: A security flaw has been discovered in GNU Binutils 2.47. This affects the function _bfd_elf_eh_fram A security flaw has been discovered in GNU Binutils 2.47. This affects the function _bfd_elf_eh_frame_section_offset of the file bfd/elf-eh-frame.c of the component Eh Frame Handler. Performing a manipulation results in null pointer dereference. The attack must be initiated from a local position. The exploit has been released to the public and may be u

CVE-2026-91780 [LOW] CWE-404 CVE-2026-91780: A weakness has been identified in GNU Binutils 2.47. This impacts the function elf_link_add_object_s A weakness has been identified in GNU Binutils 2.47. This impacts the function elf_link_add_object_symbols of the file bfd/elflink.c. Executing a manipulation can lead to null pointer dereference. The attack needs to be launched locally. The exploit has been made available to the public and could be used for attacks. The project was informed of the pro

CVE-2020-35448 [LOW] CWE-125 CVE-2020-35448: An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.35.1. A heap-based buffer over-read can occur in bfd_getl_signed_32 in libbfd.c because sh_entsize is not validated in _bfd_elf_slurp_secondary_reloc_section in elf.c.

CVE-2026-91781 [LOW] CWE-404 CVE-2026-91781: A security vulnerability has been detected in GNU Binutils 2.47. Affected is the function elf_x86_64 A security vulnerability has been detected in GNU Binutils 2.47. Affected is the function elf_x86_64_common_section_index of the file bfd/elf64-x86-64.c of the component ELF Section Handler. The manipulation leads to null pointer dereference. The attack needs to be performed locally. The exploit has been disclosed publicly and may be used. Upgrading to

CVE-2026-91782 [LOW] CWE-404 CVE-2026-91782: A vulnerability was detected in GNU Binutils 2.47. Affected by this vulnerability is the function el A vulnerability was detected in GNU Binutils 2.47. Affected by this vulnerability is the function elf_x86_allocate_dynrelocs of the file bfd/elfxx-x86.c of the component Dynamic Relocation Allocation. The manipulation results in null pointer dereference. The attack requires a local approach. The exploit is now public and may be used. Upgrading to versi

CVE-2025-1148 [LOW] CWE-401 CVE-2025-1148: A vulnerability was found in GNU Binutils 2.43 and classified as problematic. Affected by this issue A vulnerability was found in GNU Binutils 2.43 and classified as problematic. Affected by this issue is the function link_order_scan of the file ld/ldelfgen.c of the component ld. The manipulation leads to memory leak. The attack may be launched remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit h

CVE-2025-1150 [LOW] CWE-401 CVE-2025-1150: A vulnerability was found in GNU Binutils 2.43. It has been declared as problematic. This vulnerabil A vulnerability was found in GNU Binutils 2.43. It has been declared as problematic. This vulnerability affects the function bfd_malloc of the file libbfd.c of the component ld. The manipulation leads to memory leak. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has

CVE-2025-1149 [LOW] CWE-401 CVE-2025-1149: A vulnerability was found in GNU Binutils 2.43. It has been classified as problematic. This affects A vulnerability was found in GNU Binutils 2.43. It has been classified as problematic. This affects the function xstrdup of the file libiberty/xmalloc.c of the component ld. The manipulation leads to memory leak. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The expl

CVE-2025-1151 [LOW] CWE-401 CVE-2025-1151: A vulnerability was found in GNU Binutils 2.43. It has been rated as problematic. This issue affects A vulnerability was found in GNU Binutils 2.43. It has been rated as problematic. This issue affects the function xmemdup of the file xmemdup.c of the component ld. The manipulation leads to memory leak. The attack may be initiated remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclo

CVE-2025-8225 [LOW] CWE-401 CVE-2025-8225: A vulnerability was found in GNU Binutils 2.44 and classified as problematic. This issue affects the A vulnerability was found in GNU Binutils 2.44 and classified as problematic. This issue affects the function process_debug_info of the file binutils/dwarf.c of the component DWARF Section Handler. The manipulation leads to memory leak. Attacking locally is a requirement. The identifier of the patch is e51fdff7d2e538c0e5accdd65649ac68e6e0ddd4. It is reco

CVE-2025-66861 [LOW] CWE-400 CVE-2025-66861: An issue was discovered in function d_unqualified_name in file cp-demangle.c in BinUtils 2.26 allowi An issue was discovered in function d_unqualified_name in file cp-demangle.c in BinUtils 2.26 allowing attackers to cause a denial of service via crafted PE file.