BI
Product
Binutils
288
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 5High 112Medium 147Low 13
Watch
Add Binutils to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2017-12459 | 7.8 | Aug 4 | The bfd_mach_o_read_symtab_strtab function in bfd/mach-o.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29 and earlier, allows remote… Affected: through 2.29 |
| CVE-2017-12458 | 7.8 | Aug 4 | The nlm_swap_auxiliary_headers_in function in bfd/nlmcode.h in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29 and earlier, allows… Affected: through 2.29 |
| CVE-2017-12457 | 7.8 | Aug 4 | The bfd_make_section_with_flags function in section.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29 and earlier, allows remote… Affected: through 2.29 |
| CVE-2017-12456 | 7.8 | Aug 4 | The read_symbol_stabs_debugging_info function in rddbg.c in GNU Binutils 2.29 and earlier allows remote attackers to cause an out of bounds heap read via a crafted binary file Affected: through 2.29 |
| CVE-2017-12455 | 7.8 | Aug 4 | The evax_bfd_print_emh function in vms-alpha.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29 and earlier, allows remote attackers… Affected: through 2.29 |
| CVE-2017-12454 | 7.8 | Aug 4 | The _bfd_vms_slurp_egsd function in bfd/vms-alpha.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29 and earlier, allows remote… Affected: through 2.29 |
| CVE-2017-12453 | 7.8 | Aug 4 | The _bfd_vms_slurp_eeom function in libbfd.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29 and earlier, allows remote attackers to… Affected: through 2.29 |
| CVE-2017-12452 | 7.8 | Aug 4 | The bfd_mach_o_i386_canonicalize_one_reloc function in bfd/mach-o-i386.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29 and earlier,… Affected: through 2.29 |
| CVE-2017-12451 | 7.8 | Aug 4 | The _bfd_xcoff_read_ar_hdr function in bfd/coff-rs6000.c and bfd/coff64-rs6000.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29 and… Affected: through 2.29 |
| CVE-2017-12450 | 7.8 | Aug 4 | The alpha_vms_object_p function in bfd/vms-alpha.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29 and earlier, allows remote… Affected: through 2.29 |
| CVE-2017-12449 | 7.8 | Aug 4 | The _bfd_vms_save_sized_string function in vms-misc.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29 and earlier, allows remote… Affected: through 2.29 |
| CVE-2017-12448 | 7.8 | Aug 4 | The bfd_cache_close function in bfd/cache.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29 and earlier, allows remote attackers to… Affected: through 2.29 |
| CVE-2017-9756 | 7.8 | Jun 19 | The aarch64_ext_ldst_reglist function in opcodes/aarch64-dis.c in GNU Binutils 2.28 allows remote attackers to cause a denial of service (buffer overflow and application crash) or… Affected: 2.28 |
| CVE-2017-9755 | 7.8 | Jun 19 | opcodes/i386-dis.c in GNU Binutils 2.28 does not consider the number of registers for bnd mode, which allows remote attackers to cause a denial of service (buffer overflow and… Affected: 2.28 |
| CVE-2017-9754 | 7.8 | Jun 19 | The process_otr function in bfd/versados.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, does not validate a certain offset, which… Affected: 2.28 |
| CVE-2017-9753 | 7.8 | Jun 19 | The versados_mkobject function in bfd/versados.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, does not initialize a certain data… Affected: 2.28 |
| CVE-2017-9752 | 7.8 | Jun 19 | bfd/vms-alpha.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, allows remote attackers to cause a denial of service (buffer… Affected: 2.28 |
| CVE-2017-9751 | 7.8 | Jun 19 | opcodes/rl78-decode.opc in GNU Binutils 2.28 has an unbounded GETBYTE macro, which allows remote attackers to cause a denial of service (buffer overflow and application crash) or… Affected: 2.28 |
| CVE-2017-9750 | 7.8 | Jun 19 | opcodes/rx-decode.opc in GNU Binutils 2.28 lacks bounds checks for certain scale arrays, which allows remote attackers to cause a denial of service (buffer overflow and… Affected: 2.28 |
| CVE-2017-9749 | 7.8 | Jun 19 | The *regs* macros in opcodes/bfin-dis.c in GNU Binutils 2.28 allow remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have… Affected: 2.28 |
| CVE-2017-9748 | 7.8 | Jun 19 | The ieee_object_p function in bfd/ieee.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, might allow remote attackers to cause a… Affected: 2.28 |
| CVE-2017-9747 | 7.8 | Jun 19 | The ieee_archive_p function in bfd/ieee.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, might allow remote attackers to cause a… Affected: 2.28 |
| CVE-2017-9746 | 7.8 | Jun 19 | The disassemble_bytes function in objdump.c in GNU Binutils 2.28 allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have… Affected: 2.28 |
| CVE-2017-9745 | 7.8 | Jun 19 | The _bfd_vms_slurp_etir function in bfd/vms-alpha.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, allows remote attackers to cause… Affected: 2.28 |
| CVE-2017-9744 | 7.8 | Jun 19 | The sh_elf_set_mach_from_flags function in bfd/elf32-sh.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, allows remote attackers to… Affected: 2.28 |
| CVE-2017-9743 | 7.8 | Jun 19 | The print_insn_score32 function in opcodes/score7-dis.c:552 in GNU Binutils 2.28 allows remote attackers to cause a denial of service (buffer overflow and application crash) or… Affected: 2.28 |
| CVE-2017-9742 | 7.8 | Jun 19 | The score_opcodes function in opcodes/score7-dis.c in GNU Binutils 2.28 allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly… Affected: 2.28 |
| CVE-2017-9043 | 7.8 | May 18 | readelf.c in GNU Binutils 2017-04-12 has a "shift exponent too large for type unsigned long" issue, which might allow remote attackers to cause a denial of service (application… Affected: 2.28 |
| CVE-2017-9042 | 7.8 | May 18 | readelf.c in GNU Binutils 2017-04-12 has a "cannot be represented in type long" issue, which might allow remote attackers to cause a denial of service (application crash) or… Affected: 2.28 |
| CVE-2025-69649 | 7.5 | Mar 6 | GNU Binutils thru 2.46 readelf contains a null pointer dereference vulnerability when processing a crafted ELF binary with malformed header fields Affected: through 2.46 |
| CVE-2025-69650 | 7.5 | Mar 6 | GNU Binutils thru 2.46 readelf contains a double free vulnerability when processing a crafted ELF binary with malformed relocation data Affected: through 2.46 |
| CVE-2025-66862 | 7.5 | Dec 29 | A buffer overflow vulnerability in function gnu_special in file cplus-dem.c in BinUtils 2.26 allows attackers to cause a denial of service via crafted PE file Affected: 2.26 |
| CVE-2025-66866 | 7.5 | Dec 29 | An issue was discovered in function d_abi_tags in file cp-demangle.c in BinUtils 2.26 allows attackers to cause a denial of service via crafted PE file Affected: 2.26 |
| CVE-2025-66865 | 7.5 | Dec 29 | An issue was discovered in function d_print_comp_inner in file cp-demangle.c in BinUtils 2.26 allows attackers to cause a denial of service via crafted PE file Affected: 2.26 |
| CVE-2025-66864 | 7.5 | Dec 29 | An issue was discovered in function d_print_comp_inner in file cp-demangle.c in BinUtils 2.26 allows attackers to cause a denial of service via crafted PE file Affected: 2.26 |
| CVE-2025-66863 | 7.5 | Dec 29 | An issue was discovered in function d_discriminator in file cp-demangle.c in BinUtils 2.26 allows attackers to cause a denial of service via crafted PE file Affected: 2.26 |
| CVE-2025-1179 | 7.5 | Feb 11 | A vulnerability was found in GNU Binutils 2.43 Affected: 2.43 |
| CVE-2025-0840 | 7.5 | Jan 29 | A vulnerability, which was classified as problematic, was found in GNU Binutils up to 2.43 Affected: before 2.44 |
| CVE-2021-46174 | 7.5 | Aug 22 | Heap-based Buffer Overflow in function bfd_getl32 in Binutils objdump 3.37 Affected: before 2.38 |
| CVE-2020-35342 | 7.5 | Aug 22 | GNU Binutils before 2.34 has an uninitialized-heap vulnerability in function tic4x_print_cond (file opcodes/tic4x-dis.c) which could allow attackers to make an information leak Affected: before 2.34 |
| CVE-2021-3530 | 7.5 | Jun 2 | A flaw was discovered in GNU libiberty within demangle_path() in rust-demangle.c, as distributed in GNU Binutils version 2.36 Affected: 2.36 |
| CVE-2018-20657 | 7.5 | Jan 2 | The demangle_template function in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.31.1, has a memory leak via a crafted string, leading to a denial of service… Affected: 2.31.1 |
| CVE-2018-12934 | 7.5 | Jun 28 | remember_Ktype in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30, allows attackers to trigger excessive memory consumption (aka OOM) Affected: 2.30 |
| CVE-2018-12698 | 7.5 | Jun 23 | demangle_template in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30, allows attackers to trigger excessive memory consumption (aka OOM) during the "Create an… Affected: 2.30 |
| CVE-2018-12697 | 7.5 | Jun 23 | A NULL pointer dereference (aka SEGV on unknown address 0x000000000000) was discovered in work_stuff_copy_to_from in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils… Affected: 2.30 |
| CVE-2017-15938 | 7.5 | Oct 27 | dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, miscalculates DW_FORM_ref_addr die refs in the case of a relocatable object… Affected: 2.29 |
| CVE-2017-13710 | 7.5 | Aug 27 | The setup_group function in elf.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of… Affected: 2.29 |
| CVE-2017-8398 | 7.5 | May 1 | dwarf.c in GNU Binutils 2.28 is vulnerable to an invalid read of size 1 during dumping of debug information from a corrupt binary Affected: 2.28 |
| CVE-2017-8397 | 7.5 | May 1 | The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, is vulnerable to an invalid read of size 1 and an invalid write of size 1 during… Affected: 2.28 |
| CVE-2017-8396 | 7.5 | May 1 | The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, is vulnerable to an invalid read of size 1 because the existing reloc offset range… Affected: 2.28 |