BI
Product
Binutils
288
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 5High 112Medium 147Low 13
Watch
Add Binutils to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-90803 | 6.8 | Sep 14 | GNU Binutils ld elf64-x86-64.c elf_x86_64_relocate_section buffer overflow Affected: 2.47 |
| CVE-2026-90828 | 6.6 | Sep 14 | GNU Binutils ELF Orphan Section ldelf.c elf_orphan_compatible null pointer dereference Affected: 2.47 |
| CVE-2026-90801 | 6.6 | Sep 14 | GNU Binutils ld cache.c cache_bwrite buffer overflow Affected: 2.47 |
| CVE-2021-32256 | 6.5 | Jul 18 | An issue was discovered in GNU libiberty, as distributed in GNU Binutils 2.36 Affected: 2.36 |
| CVE-2023-1972 | 6.5 | May 17 | A potential heap based buffer overflow was found in _bfd_elf_slurp_version_tables() in bfd/elf.c Affected: 2.35 through 2.40 |
| CVE-2019-17451 | 6.5 | Oct 10 | An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32 Affected: 2.32 |
| CVE-2019-17450 | 6.5 | Oct 10 | find_abstract_instance in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32, allows remote attackers to cause a denial of… Affected: 2.32 |
| CVE-2018-20712 | 6.5 | Jan 15 | A heap-based buffer over-read exists in the function d_expression_1 in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31.1 Affected: 2.31.1 |
| CVE-2018-17794 | 6.5 | Sep 30 | An issue was discovered in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.31 Affected: 2.31 |
| CVE-2018-10373 | 6.5 | Apr 25 | concat_filename in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, allows remote attackers to cause a denial of service… Affected: 2.30 |
| CVE-2017-12967 | 6.5 | Aug 19 | The getsym function in tekhex.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service… Affected: 2.29 |
| CVE-2021-20197 | 6.3 | Mar 26 | There is an open race window when writing output in the following utilities in GNU binutils version 2.35 and earlier:ar, objcopy, strip, ranlib Affected: through 2.35 |
| CVE-2025-69647 | 6.2 | Mar 9 | GNU Binutils thru 2.45.1 readelf contains a denial-of-service vulnerability when processing a crafted binary with malformed DWARF loclists data Affected: through 2.45.1 |
| CVE-2025-69648 | 6.2 | Mar 9 | GNU Binutils thru 2.45.1 readelf contains a denial-of-service vulnerability when processing a crafted binary with malformed DWARF .debug_rnglists data Affected: through 2.45.1 |
| CVE-2025-69652 | 6.2 | Mar 6 | GNU Binutils thru 2.46 readelf contains a vulnerability that leads to an abort (SIGABRT) when processing a crafted ELF binary with malformed DWARF abbrev or debug information Affected: through 2.46 |
| CVE-2026-90804 | 6.1 | Sep 14 | GNU Binutils Eh Frame Section elf-eh-frame.c _bfd_elf_write_section_eh_frame buffer overflow Affected: 2.47 |
| CVE-2026-4647 | 6.1 | Mar 23 | Binutils: out-of-bounds read in xcoff relocation processing in gnu binutils bfd library Affected: All versions, or not specified |
| CVE-2020-35494 | 6.1 | Jan 4 | There's a flaw in binutils /opcodes/tic4x-dis.c Affected: before 2.34 |
| CVE-2025-1153 | 5.9 | Feb 10 | A vulnerability classified as problematic was found in GNU Binutils 2.43/2.44 Affected: 2.43; 2.44 |
| CVE-2025-1178 | 5.6 | Feb 11 | A vulnerability was found in GNU Binutils 2.43 Affected: 2.43 |
| CVE-2026-6844 | 5.5 | Apr 22 | Binutils: binutils: denial of service vulnerabilities in readelf via crafted elf files Affected: All versions, or not specified |
| CVE-2025-69645 | 5.5 | Mar 6 | Binutils objdump contains a denial-of-service vulnerability when processing a crafted binary with malformed DWARF debug information Affected: 2.44 |
| CVE-2025-69651 | 5.5 | Mar 6 | GNU Binutils thru 2.46 readelf contains a vulnerability that leads to an invalid pointer free when processing a crafted ELF binary with malformed relocation or symbol data Affected: through 2.46 |
| CVE-2025-69646 | 5.5 | Mar 6 | Binutils objdump contains a denial-of-service vulnerability when processing a crafted binary with malformed DWARF debug_rnglists data Affected: 2.44 |
| CVE-2025-11840 | 5.5 | Oct 16 | GNU Binutils ldmisc.c vfinfo out-of-bounds Affected: 2.45 |
| CVE-2025-11839 | 5.5 | Oct 16 | GNU Binutils prdbg.c tg_tag_type return value Affected: 2.45 |
| CVE-2025-11495 | 5.5 | Oct 8 | GNU Binutils Linker elf64-x86-64.c elf_x86_64_relocate_section heap-based overflow Affected: 2.45 |
| CVE-2025-11494 | 5.5 | Oct 8 | GNU Binutils Linker elfxx-x86.c _bfd_x86_elf_late_size_sections out-of-bounds Affected: 2.45 |
| CVE-2025-11414 | 5.5 | Oct 7 | GNU Binutils Linker elflink.c get_link_hash_entry out-of-bounds Affected: 2.45 |
| CVE-2025-11413 | 5.5 | Oct 7 | GNU Binutils Linker elflink.c elf_link_add_object_symbols out-of-bounds Affected: 2.45 |
| CVE-2025-11412 | 5.5 | Oct 7 | GNU Binutils Linker elflink.c bfd_elf_gc_record_vtentry out-of-bounds Affected: 2.45 |
| CVE-2025-11081 | 5.5 | Sep 27 | A vulnerability was detected in GNU Binutils 2.45 Affected: 2.45 |
| CVE-2025-8224 | 5.5 | Jul 27 | GNU Binutils BFD Library elf.c bfd_elf_get_str_section null pointer dereference Affected: 2.44 |
| CVE-2025-3198 | 5.5 | Apr 4 | GNU Binutils objdump bucomm.c display_info memory leak Affected: 2.43; 2.44 |
| CVE-2023-25588 | 5.5 | Sep 14 | A flaw was found in Binutils Affected: 2.40 |
| CVE-2023-25586 | 5.5 | Sep 14 | A flaw was found in Binutils Affected: 2.40 |
| CVE-2023-25585 | 5.5 | Sep 14 | A flaw was found in Binutils Affected: 2.40 |
| CVE-2022-48065 | 5.5 | Aug 22 | GNU Binutils before 2.40 was discovered to contain a memory leak vulnerability var the function find_abstract_instance in dwarf2.c Affected: before 2.40 |
| CVE-2022-48064 | 5.5 | Aug 22 | GNU Binutils before 2.40 was discovered to contain an excessive memory consumption vulnerability via the function bfd_dwarf2_find_nearest_line_with_alt at dwarf2.c Affected: before 2.40 |
| CVE-2022-48063 | 5.5 | Aug 22 | GNU Binutils before 2.40 was discovered to contain an excessive memory consumption vulnerability via the function load_separate_debug_files at dwarf2.c Affected: before 2.40 |
| CVE-2022-47011 | 5.5 | Aug 22 | An issue was discovered function parse_stab_struct_fields in stabs.c in Binutils 2.34 thru 2.38, allows attackers to cause a denial of service due to memory leaks Affected: 2.34 through 2.38 |
| CVE-2022-47010 | 5.5 | Aug 22 | An issue was discovered function pr_function_type in prdbg.c in Binutils 2.34 thru 2.38, allows attackers to cause a denial of service due to memory leaks Affected: 2.34 through 2.38 |
| CVE-2022-47008 | 5.5 | Aug 22 | An issue was discovered function make_tempdir, and make_tempname in bucomm.c in Binutils 2.34 thru 2.38, allows attackers to cause a denial of service due to memory leaks Affected: 2.34 through 2.38 |
| CVE-2022-47007 | 5.5 | Aug 22 | An issue was discovered function stab_demangle_v3_arg in stabs.c in Binutils 2.34 thru 2.38, allows attackers to cause a denial of service due to memory leaks Affected: 2.34 through 2.38 |
| CVE-2022-35206 | 5.5 | Aug 22 | Null pointer dereference vulnerability in Binutils readelf 2.38.50 via function read_and_display_attr_value in file dwarf.c Affected: 2.38.50 |
| CVE-2022-35205 | 5.5 | Aug 22 | An issue was discovered in Binutils readelf 2.38.50, reachable assertion failure in function display_debug_names allows attackers to cause a denial of service Affected: 2.38.50 |
| CVE-2020-21490 | 5.5 | Aug 22 | An issue was discovered in GNU Binutils 2.34 Affected: before 2.34 |
| CVE-2020-19724 | 5.5 | Aug 22 | A memory consumption issue in get_data function in binutils/nm.c in GNU nm before 2.34 allows attackers to cause a denial of service via crafted command Affected: before 2.34 |
| CVE-2022-4285 | 5.5 | Jan 27 | An illegal memory access flaw was found in the binutils package Affected: 2.35 before 2.39-7 |
| CVE-2022-38533 | 5.5 | Aug 26 | In GNU Binutils before 2.40, there is a heap-buffer-overflow in the error function bfd_getl32 when called from the strip_main function in strip-new via a crafted file Affected: through 2.39 |
