BI
Product
Binutils
288
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 5High 112Medium 147Low 13
Watch
Add Binutils to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2017-7303 | 7.5 | Mar 29 | The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, is vulnerable to an invalid read (of size 4) because of missing a check (in the… Affected: 2.28 |
| CVE-2017-7302 | 7.5 | Mar 29 | The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, has a swap_std_reloc_out function in bfd/aoutx.h that is vulnerable to an invalid read… Affected: 2.28 |
| CVE-2017-7301 | 7.5 | Mar 29 | The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, has an aout_link_add_symbols function in bfd/aoutx.h that has an off-by-one… Affected: 2.28 |
| CVE-2017-7300 | 7.5 | Mar 29 | The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, has an aout_link_add_symbols function in bfd/aoutx.h that is vulnerable to a heap-based… Affected: 2.28 |
| CVE-2017-7227 | 7.5 | Mar 22 | GNU linker (ld) in GNU Binutils 2.28 is vulnerable to a heap-based buffer overflow while processing a bogus input script, leading to a program crash Affected: 2.28 |
| CVE-2017-7225 | 7.5 | Mar 22 | The find_nearest_line function in addr2line in GNU Binutils 2.28 does not handle the case where the main file name and the directory name are both empty, triggering a NULL pointer… Affected: 2.28 |
| CVE-2017-7223 | 7.5 | Mar 22 | GNU assembler in GNU Binutils 2.28 is vulnerable to a global buffer overflow (of size 1) while attempting to unget an EOF character from the input stream, potentially leading to a… Affected: 2.28 |
| CVE-2006-2362 | 7.3 | May 15 | Buffer overflow in getsym in tekhex.c in libbfd in Free Software Foundation GNU Binutils before 20060423, as used by GNU strings, allows context-dependent attackers to cause a… Affected: before 2.17 |
| CVE-2026-3441 | 7.1 | Mar 15 | Binutils: gnu binutils: information disclosure via specially crafted xcoff object file Affected: All versions, or not specified |
| CVE-2026-3442 | 7.1 | Mar 15 | Binutils: gnu binutils: information disclosure or denial of service via out-of-bounds read in bfd linker Affected: All versions, or not specified |
| CVE-2023-25584 | 7.1 | Sep 14 | An out-of-bounds read flaw was found in the parse_module function in bfd/vms-alpha.c in Binutils Affected: before 2.40 |
| CVE-2021-3549 | 7.1 | May 26 | An out of bounds flaw was found in GNU binutils objdump utility version 2.36 Affected: 2.36 |