BI
Product
Binutils
288
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 5High 112Medium 147Low 13
Watch
Add Binutils to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-12699 | 9.8 | Jun 23 | finish_stab in stabs.c in GNU Binutils 2.30 allows attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact, as demonstrated… Affected: 2.30 |
| CVE-2017-7614 | 9.8 | Apr 9 | elflink.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, has a "member access within null pointer" undefined behavior issue, which… Affected: 2.28 |
| CVE-2014-9939 | 9.8 | Mar 21 | ihex.c in GNU Binutils before 2.26 contains a stack buffer overflow when printing bad bytes in Intel Hex objects Affected: through 2.25 |
| CVE-2017-7226 | 9.1 | Mar 22 | The pe_ILF_object_p function in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, is vulnerable to a heap-based buffer over-read of size… Affected: 2.28 |
| CVE-2017-6969 | 9.1 | Mar 17 | readelf in GNU Binutils 2.28 is vulnerable to a heap-based buffer over-read while processing corrupt RL78 binaries Affected: 2.28 |
| CVE-2020-19726 | 8.8 | Aug 22 | An issue was discovered in binutils libbfd.c 2.36 relating to the auxiliary symbol data allows attackers to read or write to system memory or cause a denial of service Affected: 2.36 |
| CVE-2026-6846 | 7.8 | Apr 22 | Binutils: binutils: arbitrary code execution via malformed xcoff object file processing Affected: through 2.46 |
| CVE-2025-11083 | 7.8 | Sep 27 | GNU Binutils Linker elfcode.h elf_swap_shdr heap-based overflow Affected: 2.45 |
| CVE-2025-11082 | 7.8 | Sep 27 | GNU Binutils Linker elf-eh-frame.c _bfd_elf_parse_eh_frame heap-based overflow Affected: 2.45 |
| CVE-2025-7546 | 7.8 | Jul 13 | GNU Binutils elf.c bfd_elf_set_group_contents out-of-bounds write Affected: 2.45 |
| CVE-2025-7545 | 7.8 | Jul 13 | GNU Binutils objcopy.c copy_section heap-based overflow Affected: 2.45 |
| CVE-2025-5245 | 7.8 | May 27 | GNU Binutils objdump debug.c debug_type_samep memory corruption Affected: 2.0; 2.1; 2.2; 2.3; 2.4; 2.5; +34 more |
| CVE-2025-5244 | 7.8 | May 27 | GNU Binutils ld elflink.c elf_gc_sweep memory corruption Affected: 2.0; 2.1; 2.2; 2.3; 2.4; 2.5; +34 more |
| CVE-2022-47696 | 7.8 | Aug 22 | An issue was discovered Binutils objdump before 2.39.3 allows attackers to cause a denial of service or other unspecified impacts via function compare_symbols Affected: before 2.39.3 |
| CVE-2022-47695 | 7.8 | Aug 22 | An issue was discovered Binutils objdump before 2.39.3 allows attackers to cause a denial of service or other unspecified impacts via function bfd_mach_o_get_synthetic_symtab in… Affected: before 2.39.3 |
| CVE-2022-47673 | 7.8 | Aug 22 | An issue was discovered in Binutils addr2line before 2.39.3, function parse_module contains multiple out of bound reads which may cause a denial of service or other unspecified… Affected: before 2.39.3 |
| CVE-2022-45703 | 7.8 | Aug 22 | Heap buffer overflow vulnerability in binutils readelf before 2.40 via function display_debug_section in file readelf.c Affected: before 2.40 |
| CVE-2022-44840 | 7.8 | Aug 22 | Heap buffer overflow vulnerability in binutils readelf before 2.40 via function find_section_in_set in file readelf.c Affected: before 2.40 |
| CVE-2023-1579 | 7.8 | Apr 3 | Heap based buffer overflow in binutils-gdb/bfd/libbfd.c in bfd_getl64 Affected: 2.39 |
| CVE-2021-45078 | 7.8 | Dec 15 | stab_xcoff_builtin_type in stabs.c in GNU Binutils through 2.37 allows attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other… Affected: through 2.37 |
| CVE-2021-37322 | 7.8 | Nov 18 | GCC c++filt v2.26 was discovered to contain a use-after-free vulnerability via the component cplus-dem.c Affected: before 2.32 |
| CVE-2021-20294 | 7.8 | Apr 29 | A flaw was found in binutils readelf 2.35 program Affected: 2.35 before 2.35.2 |
| CVE-2019-9070 | 7.8 | Feb 24 | An issue was discovered in GNU libiberty, as distributed in GNU Binutils 2.32 Affected: 2.32 |
| CVE-2019-9077 | 7.8 | Feb 24 | An issue was discovered in GNU Binutils 2.32 Affected: 2.32 |
| CVE-2019-9075 | 7.8 | Feb 24 | An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32 Affected: 2.32 |
| CVE-2018-1000876 | 7.8 | Dec 20 | binutils version 2.32 and earlier contains a Integer Overflow vulnerability in objdump, bfd_get_dynamic_reloc_upper_bound,bfd_canonicalize_dynamic_reloc that can result in Integer… Affected: before 2.32 |
| CVE-2018-19931 | 7.8 | Dec 7 | An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils through 2.31 Affected: through 2.31 |
| CVE-2018-18483 | 7.8 | Oct 18 | The get_count function in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.31, allows remote attackers to cause a denial of service (malloc called with the result of… Affected: 2.31 |
| CVE-2018-7643 | 7.8 | Mar 2 | The display_debug_ranges function in dwarf.c in GNU Binutils 2.30 allows remote attackers to cause a denial of service (integer overflow and application crash) or possibly have… Affected: 2.30 |
| CVE-2018-7208 | 7.8 | Feb 18 | In the coff_pointerize_aux function in coffgen.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, an index is not validated, which… Affected: 2.30 |
| CVE-2018-6543 | 7.8 | Feb 2 | In GNU Binutils 2.30, there's an integer overflow in the function load_specific_debug_section() in objdump.c, which results in `malloc()` with 0 size Affected: 2.30 |
| CVE-2018-6323 | 7.8 | Jan 26 | The elf_object_p function in elfcode.h in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1, has an unsigned integer overflow because… Affected: 2.29.1 |
| CVE-2017-17126 | 7.8 | Dec 4 | The load_debug_section function in readelf.c in GNU Binutils 2.29.1 allows remote attackers to cause a denial of service (invalid memory access and application crash) or possibly… Affected: 2.29.1 |
| CVE-2017-17125 | 7.8 | Dec 4 | nm.c and objdump.c in GNU Binutils 2.29.1 mishandle certain global symbols, which allows remote attackers to cause a denial of service (_bfd_elf_get_symbol_version_string buffer… Affected: 2.29.1 |
| CVE-2017-17124 | 7.8 | Dec 4 | The _bfd_coff_read_string_table function in coffgen.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1, does not properly validate… Affected: 2.29.1 |
| CVE-2017-17122 | 7.8 | Dec 4 | The dump_relocs_in_section function in objdump.c in GNU Binutils 2.29.1 does not check for reloc count integer overflows, which allows remote attackers to cause a denial of… Affected: 2.29.1 |
| CVE-2017-17121 | 7.8 | Dec 4 | The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1, allows remote attackers to cause a denial of service (memory access violation) or… Affected: 2.29.1 |
| CVE-2017-16832 | 7.8 | Nov 15 | The pe_bfd_read_buildid function in peicode.h in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1, does not validate size and offset… Affected: 2.29.1 |
| CVE-2017-16831 | 7.8 | Nov 15 | coffgen.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1, does not validate the symbol count, which allows remote attackers to… Affected: 2.29.1 |
| CVE-2017-16830 | 7.8 | Nov 15 | The print_gnu_property_note function in readelf.c in GNU Binutils 2.29.1 does not have integer-overflow protection on 32-bit platforms, which allows remote attackers to cause a… Affected: 2.29.1 |
| CVE-2017-16829 | 7.8 | Nov 15 | The _bfd_elf_parse_gnu_properties function in elf-properties.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1, does not prevent… Affected: 2.29.1 |
| CVE-2017-16828 | 7.8 | Nov 15 | The display_debug_frames function in dwarf.c in GNU Binutils 2.29.1 allows remote attackers to cause a denial of service (integer overflow and heap-based buffer over-read, and… Affected: 2.29.1 |
| CVE-2017-16827 | 7.8 | Nov 15 | The aout_get_external_symbols function in aoutx.h in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1, allows remote attackers to cause… Affected: 2.29.1 |
| CVE-2017-16826 | 7.8 | Nov 15 | The coff_slurp_line_table function in coffcode.h in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1, allows remote attackers to cause… Affected: 2.29.1 |
| CVE-2017-15996 | 7.8 | Oct 29 | elfcomm.c in readelf in GNU Binutils 2.29 allows remote attackers to cause a denial of service (excessive memory allocation) or possibly have unspecified other impact via a… Affected: 2.29 |
| CVE-2017-15020 | 7.8 | Oct 5 | dwarf1.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, mishandles pointers, which allows remote attackers to cause a denial of… Affected: 2.29 |
| CVE-2017-14745 | 7.8 | Sep 26 | The *_get_synthetic_symtab functions in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, interpret a -1 value as a sorting count instead… Affected: 2.29 |
| CVE-2017-14729 | 7.8 | Sep 25 | The *_get_synthetic_symtab functions in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, do not ensure a unique PLT entry for a symbol,… Affected: 2.29 |
| CVE-2017-14333 | 7.8 | Sep 12 | The process_version_sections function in readelf.c in GNU Binutils 2.29 allows attackers to cause a denial of service (Integer Overflow, and hang because of a time-consuming loop)… Affected: 2.29 |
| CVE-2017-12799 | 7.8 | Aug 10 | The elf_read_notesfunction in bfd/elf.c in GNU Binutils 2.29 allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have… Affected: 2.29 |