BI
Product
Binutils
by GNU · last CVE Sep 15, 2026
288
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 5High 112Medium 147Low 13
Watch

Add Binutils to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-90803
6.8
0%
Sep 14
GNU Binutils ld elf64-x86-64.c elf_x86_64_relocate_section buffer overflow
Affected: 2.47
CVE-2026-90828
6.6
0%
Sep 14
GNU Binutils ELF Orphan Section ldelf.c elf_orphan_compatible null pointer dereference
Affected: 2.47
CVE-2026-90801
6.6
0%
Sep 14
GNU Binutils ld cache.c cache_bwrite buffer overflow
Affected: 2.47
CVE-2021-32256
6.5
1%
Jul 18
An issue was discovered in GNU libiberty, as distributed in GNU Binutils 2.36
Affected: 2.36
CVE-2023-1972
6.5
1%
May 17
A potential heap based buffer overflow was found in _bfd_elf_slurp_version_tables() in bfd/elf.c
Affected: 2.35 through 2.40
CVE-2019-17451
6.5
2%
Oct 10
An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32
Affected: 2.32
CVE-2019-17450
6.5
3%
Oct 10
find_abstract_instance in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32, allows remote attackers to cause a denial of…
Affected: 2.32
CVE-2018-20712
6.5
3%
Jan 15
A heap-based buffer over-read exists in the function d_expression_1 in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31.1
Affected: 2.31.1
CVE-2018-17794
6.5
2%
Sep 30
An issue was discovered in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.31
Affected: 2.31
CVE-2018-10373
6.5
3%
Apr 25
concat_filename in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, allows remote attackers to cause a denial of service…
Affected: 2.30
CVE-2017-12967
6.5
3%
Aug 19
The getsym function in tekhex.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service…
Affected: 2.29
CVE-2021-20197
6.3
0%
Mar 26
There is an open race window when writing output in the following utilities in GNU binutils version 2.35 and earlier:ar, objcopy, strip, ranlib
Affected: through 2.35
CVE-2025-69647
6.2
0%
Mar 9
GNU Binutils thru 2.45.1 readelf contains a denial-of-service vulnerability when processing a crafted binary with malformed DWARF loclists data
Affected: through 2.45.1
CVE-2025-69648
6.2
0%
Mar 9
GNU Binutils thru 2.45.1 readelf contains a denial-of-service vulnerability when processing a crafted binary with malformed DWARF .debug_rnglists data
Affected: through 2.45.1
CVE-2025-69652
6.2
0%
Mar 6
GNU Binutils thru 2.46 readelf contains a vulnerability that leads to an abort (SIGABRT) when processing a crafted ELF binary with malformed DWARF abbrev or debug information
Affected: through 2.46
CVE-2026-90804
6.1
0%
Sep 14
GNU Binutils Eh Frame Section elf-eh-frame.c _bfd_elf_write_section_eh_frame buffer overflow
Affected: 2.47
CVE-2026-4647
6.1
0%
Mar 23
Binutils: out-of-bounds read in xcoff relocation processing in gnu binutils bfd library
Affected: All versions, or not specified
CVE-2020-35494
6.1
1%
Jan 4
There's a flaw in binutils /opcodes/tic4x-dis.c
Affected: before 2.34
CVE-2025-1153
5.9
1%
Feb 10
A vulnerability classified as problematic was found in GNU Binutils 2.43/2.44
Affected: 2.43; 2.44
CVE-2025-1178
5.6
1%
Feb 11
A vulnerability was found in GNU Binutils 2.43
Affected: 2.43
CVE-2026-6844
5.5
0%
Apr 22
Binutils: binutils: denial of service vulnerabilities in readelf via crafted elf files
Affected: All versions, or not specified
CVE-2025-69645
5.5
0%
Mar 6
Binutils objdump contains a denial-of-service vulnerability when processing a crafted binary with malformed DWARF debug information
Affected: 2.44
CVE-2025-69651
5.5
0%
Mar 6
GNU Binutils thru 2.46 readelf contains a vulnerability that leads to an invalid pointer free when processing a crafted ELF binary with malformed relocation or symbol data
Affected: through 2.46
CVE-2025-69646
5.5
0%
Mar 6
Binutils objdump contains a denial-of-service vulnerability when processing a crafted binary with malformed DWARF debug_rnglists data
Affected: 2.44
CVE-2025-11840
5.5
0%
Oct 16
GNU Binutils ldmisc.c vfinfo out-of-bounds
Affected: 2.45
CVE-2025-11839
5.5
0%
Oct 16
GNU Binutils prdbg.c tg_tag_type return value
Affected: 2.45
CVE-2025-11495
5.5
0%
Oct 8
GNU Binutils Linker elf64-x86-64.c elf_x86_64_relocate_section heap-based overflow
Affected: 2.45
CVE-2025-11494
5.5
0%
Oct 8
GNU Binutils Linker elfxx-x86.c _bfd_x86_elf_late_size_sections out-of-bounds
Affected: 2.45
CVE-2025-11414
5.5
0%
Oct 7
GNU Binutils Linker elflink.c get_link_hash_entry out-of-bounds
Affected: 2.45
CVE-2025-11413
5.5
0%
Oct 7
GNU Binutils Linker elflink.c elf_link_add_object_symbols out-of-bounds
Affected: 2.45
CVE-2025-11412
5.5
0%
Oct 7
GNU Binutils Linker elflink.c bfd_elf_gc_record_vtentry out-of-bounds
Affected: 2.45
CVE-2025-11081
5.5
0%
Sep 27
A vulnerability was detected in GNU Binutils 2.45
Affected: 2.45
CVE-2025-8224
5.5
0%
Jul 27
GNU Binutils BFD Library elf.c bfd_elf_get_str_section null pointer dereference
Affected: 2.44
CVE-2025-3198
5.5
0%
Apr 4
GNU Binutils objdump bucomm.c display_info memory leak
Affected: 2.43; 2.44
CVE-2023-25588
5.5
0%
Sep 14
A flaw was found in Binutils
Affected: 2.40
CVE-2023-25586
5.5
0%
Sep 14
A flaw was found in Binutils
Affected: 2.40
CVE-2023-25585
5.5
0%
Sep 14
A flaw was found in Binutils
Affected: 2.40
CVE-2022-48065
5.5
1%
Aug 22
GNU Binutils before 2.40 was discovered to contain a memory leak vulnerability var the function find_abstract_instance in dwarf2.c
Affected: before 2.40
CVE-2022-48064
5.5
1%
Aug 22
GNU Binutils before 2.40 was discovered to contain an excessive memory consumption vulnerability via the function bfd_dwarf2_find_nearest_line_with_alt at dwarf2.c
Affected: before 2.40
CVE-2022-48063
5.5
0%
Aug 22
GNU Binutils before 2.40 was discovered to contain an excessive memory consumption vulnerability via the function load_separate_debug_files at dwarf2.c
Affected: before 2.40
CVE-2022-47011
5.5
0%
Aug 22
An issue was discovered function parse_stab_struct_fields in stabs.c in Binutils 2.34 thru 2.38, allows attackers to cause a denial of service due to memory leaks
Affected: 2.34 through 2.38
CVE-2022-47010
5.5
0%
Aug 22
An issue was discovered function pr_function_type in prdbg.c in Binutils 2.34 thru 2.38, allows attackers to cause a denial of service due to memory leaks
Affected: 2.34 through 2.38
CVE-2022-47008
5.5
0%
Aug 22
An issue was discovered function make_tempdir, and make_tempname in bucomm.c in Binutils 2.34 thru 2.38, allows attackers to cause a denial of service due to memory leaks
Affected: 2.34 through 2.38
CVE-2022-47007
5.5
0%
Aug 22
An issue was discovered function stab_demangle_v3_arg in stabs.c in Binutils 2.34 thru 2.38, allows attackers to cause a denial of service due to memory leaks
Affected: 2.34 through 2.38
CVE-2022-35206
5.5
0%
Aug 22
Null pointer dereference vulnerability in Binutils readelf 2.38.50 via function read_and_display_attr_value in file dwarf.c
Affected: 2.38.50
CVE-2022-35205
5.5
0%
Aug 22
An issue was discovered in Binutils readelf 2.38.50, reachable assertion failure in function display_debug_names allows attackers to cause a denial of service
Affected: 2.38.50
CVE-2020-21490
5.5
0%
Aug 22
An issue was discovered in GNU Binutils 2.34
Affected: before 2.34
CVE-2020-19724
5.5
0%
Aug 22
A memory consumption issue in get_data function in binutils/nm.c in GNU nm before 2.34 allows attackers to cause a denial of service via crafted command
Affected: before 2.34
CVE-2022-4285
5.5
0%
Jan 27
An illegal memory access flaw was found in the binutils package
Affected: 2.35 before 2.39-7
CVE-2022-38533
5.5
0%
Aug 26
In GNU Binutils before 2.40, there is a heap-buffer-overflow in the error function bfd_getl32 when called from the strip_main function in strip-new via a crafted file
Affected: through 2.39
Page 1 of 3 · 147 total