BI
Product
Binutils
288
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 5High 112Medium 147Low 13
Watch
Add Binutils to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2017-8395 | 7.5 | May 1 | The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, is vulnerable to an invalid write of size 8 because of missing a malloc() return-value… Affected: 2.28 |
| CVE-2017-8394 | 7.5 | May 1 | The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, is vulnerable to an invalid read of size 4 due to NULL pointer dereferencing of… Affected: 2.28 |
| CVE-2017-8393 | 7.5 | May 1 | The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, is vulnerable to a global buffer over-read error because of an assumption made by code… Affected: 2.28 |
| CVE-2017-8392 | 7.5 | May 1 | The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, is vulnerable to an invalid read of size 8 because of missing a check to determine… Affected: 2.28 |
| CVE-2017-7304 | 7.5 | Mar 29 | The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, is vulnerable to an invalid read (of size 8) because of missing a check (in the… Affected: 2.28 |
| CVE-2017-7303 | 7.5 | Mar 29 | The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, is vulnerable to an invalid read (of size 4) because of missing a check (in the… Affected: 2.28 |
| CVE-2017-7302 | 7.5 | Mar 29 | The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, has a swap_std_reloc_out function in bfd/aoutx.h that is vulnerable to an invalid read… Affected: 2.28 |
| CVE-2017-7301 | 7.5 | Mar 29 | The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, has an aout_link_add_symbols function in bfd/aoutx.h that has an off-by-one… Affected: 2.28 |
| CVE-2017-7300 | 7.5 | Mar 29 | The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, has an aout_link_add_symbols function in bfd/aoutx.h that is vulnerable to a heap-based… Affected: 2.28 |
| CVE-2017-7227 | 7.5 | Mar 22 | GNU linker (ld) in GNU Binutils 2.28 is vulnerable to a heap-based buffer overflow while processing a bogus input script, leading to a program crash Affected: 2.28 |
| CVE-2017-7225 | 7.5 | Mar 22 | The find_nearest_line function in addr2line in GNU Binutils 2.28 does not handle the case where the main file name and the directory name are both empty, triggering a NULL pointer… Affected: 2.28 |
| CVE-2017-7223 | 7.5 | Mar 22 | GNU assembler in GNU Binutils 2.28 is vulnerable to a global buffer overflow (of size 1) while attempting to unget an EOF character from the input stream, potentially leading to a… Affected: 2.28 |
| CVE-2006-2362 | 7.3 | May 15 | Buffer overflow in getsym in tekhex.c in libbfd in Free Software Foundation GNU Binutils before 20060423, as used by GNU strings, allows context-dependent attackers to cause a… Affected: before 2.17 |
| CVE-2026-3441 | 7.1 | Mar 15 | Binutils: gnu binutils: information disclosure via specially crafted xcoff object file Affected: All versions, or not specified |
| CVE-2026-3442 | 7.1 | Mar 15 | Binutils: gnu binutils: information disclosure or denial of service via out-of-bounds read in bfd linker Affected: All versions, or not specified |
| CVE-2023-25584 | 7.1 | Sep 14 | An out-of-bounds read flaw was found in the parse_module function in bfd/vms-alpha.c in Binutils Affected: before 2.40 |
| CVE-2021-3549 | 7.1 | May 26 | An out of bounds flaw was found in GNU binutils objdump utility version 2.36 Affected: 2.36 |
| CVE-2026-90803 | 6.8 | Sep 14 | GNU Binutils ld elf64-x86-64.c elf_x86_64_relocate_section buffer overflow Affected: 2.47 |
| CVE-2026-90828 | 6.6 | Sep 14 | GNU Binutils ELF Orphan Section ldelf.c elf_orphan_compatible null pointer dereference Affected: 2.47 |
| CVE-2026-90801 | 6.6 | Sep 14 | GNU Binutils ld cache.c cache_bwrite buffer overflow Affected: 2.47 |
| CVE-2021-32256 | 6.5 | Jul 18 | An issue was discovered in GNU libiberty, as distributed in GNU Binutils 2.36 Affected: 2.36 |
| CVE-2023-1972 | 6.5 | May 17 | A potential heap based buffer overflow was found in _bfd_elf_slurp_version_tables() in bfd/elf.c Affected: 2.35 through 2.40 |
| CVE-2019-17451 | 6.5 | Oct 10 | An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32 Affected: 2.32 |
| CVE-2019-17450 | 6.5 | Oct 10 | find_abstract_instance in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32, allows remote attackers to cause a denial of… Affected: 2.32 |
| CVE-2018-20712 | 6.5 | Jan 15 | A heap-based buffer over-read exists in the function d_expression_1 in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31.1 Affected: 2.31.1 |
| CVE-2018-17794 | 6.5 | Sep 30 | An issue was discovered in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.31 Affected: 2.31 |
| CVE-2018-10373 | 6.5 | Apr 25 | concat_filename in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, allows remote attackers to cause a denial of service… Affected: 2.30 |
| CVE-2017-12967 | 6.5 | Aug 19 | The getsym function in tekhex.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service… Affected: 2.29 |
| CVE-2021-20197 | 6.3 | Mar 26 | There is an open race window when writing output in the following utilities in GNU binutils version 2.35 and earlier:ar, objcopy, strip, ranlib Affected: through 2.35 |
| CVE-2025-69647 | 6.2 | Mar 9 | GNU Binutils thru 2.45.1 readelf contains a denial-of-service vulnerability when processing a crafted binary with malformed DWARF loclists data Affected: through 2.45.1 |
| CVE-2025-69648 | 6.2 | Mar 9 | GNU Binutils thru 2.45.1 readelf contains a denial-of-service vulnerability when processing a crafted binary with malformed DWARF .debug_rnglists data Affected: through 2.45.1 |
| CVE-2025-69652 | 6.2 | Mar 6 | GNU Binutils thru 2.46 readelf contains a vulnerability that leads to an abort (SIGABRT) when processing a crafted ELF binary with malformed DWARF abbrev or debug information Affected: through 2.46 |
| CVE-2026-90804 | 6.1 | Sep 14 | GNU Binutils Eh Frame Section elf-eh-frame.c _bfd_elf_write_section_eh_frame buffer overflow Affected: 2.47 |
| CVE-2026-4647 | 6.1 | Mar 23 | Binutils: out-of-bounds read in xcoff relocation processing in gnu binutils bfd library Affected: All versions, or not specified |
| CVE-2020-35494 | 6.1 | Jan 4 | There's a flaw in binutils /opcodes/tic4x-dis.c Affected: before 2.34 |
| CVE-2025-1153 | 5.9 | Feb 10 | GNU Binutils format.c bfd_set_format memory corruption Affected: 2.43; 2.44 |
| CVE-2025-1178 | 5.6 | Feb 11 | GNU Binutils ld libbfd.c bfd_putl64 memory corruption Affected: 2.43 |
| CVE-2026-6844 | 5.5 | Apr 22 | Binutils: binutils: denial of service vulnerabilities in readelf via crafted elf files Affected: All versions, or not specified |
| CVE-2025-69645 | 5.5 | Mar 6 | Binutils objdump contains a denial-of-service vulnerability when processing a crafted binary with malformed DWARF debug information Affected: 2.44 |
| CVE-2025-69651 | 5.5 | Mar 6 | GNU Binutils thru 2.46 readelf contains a vulnerability that leads to an invalid pointer free when processing a crafted ELF binary with malformed relocation or symbol data Affected: through 2.46 |
| CVE-2025-69646 | 5.5 | Mar 6 | Binutils objdump contains a denial-of-service vulnerability when processing a crafted binary with malformed DWARF debug_rnglists data Affected: 2.44 |
| CVE-2025-11840 | 5.5 | Oct 16 | GNU Binutils ldmisc.c vfinfo out-of-bounds Affected: 2.45 |
| CVE-2025-11839 | 5.5 | Oct 16 | GNU Binutils prdbg.c tg_tag_type return value Affected: 2.45 |
| CVE-2025-11495 | 5.5 | Oct 8 | GNU Binutils Linker elf64-x86-64.c elf_x86_64_relocate_section heap-based overflow Affected: 2.45 |
| CVE-2025-11494 | 5.5 | Oct 8 | GNU Binutils Linker elfxx-x86.c _bfd_x86_elf_late_size_sections out-of-bounds Affected: 2.45 |
| CVE-2025-11414 | 5.5 | Oct 7 | GNU Binutils Linker elflink.c get_link_hash_entry out-of-bounds Affected: 2.45 |
| CVE-2025-11413 | 5.5 | Oct 7 | GNU Binutils Linker elflink.c elf_link_add_object_symbols out-of-bounds Affected: 2.45 |
| CVE-2025-11412 | 5.5 | Oct 7 | GNU Binutils Linker elflink.c bfd_elf_gc_record_vtentry out-of-bounds Affected: 2.45 |
| CVE-2025-11081 | 5.5 | Sep 27 | GNU Binutils objdump.c dump_dwarf_section out-of-bounds Affected: 2.45 |
| CVE-2025-8224 | 5.5 | Jul 27 | GNU Binutils BFD Library elf.c bfd_elf_get_str_section null pointer dereference Affected: 2.44 |
