BI
Product
Binutils
288
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 5High 112Medium 147Low 13
Watch
Add Binutils to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2017-17123 | 5.5 | Dec 4 | The coff_slurp_reloc_table function in coffcode.h in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1, allows remote attackers to cause… Affected: 2.29.1 |
| CVE-2017-17080 | 5.5 | Nov 30 | elf.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1, does not validate sizes of core notes, which allows remote attackers to… Affected: 2.29.1 |
| CVE-2017-15939 | 5.5 | Oct 27 | dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, mishandles NULL files in a .debug_line file table, which allows remote… Affected: 2.29 |
| CVE-2017-15225 | 5.5 | Oct 10 | _bfd_dwarf2_cleanup_debug_info in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial… Affected: 2.29 |
| CVE-2017-15025 | 5.5 | Oct 5 | decode_line_info in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service… Affected: 2.29 |
| CVE-2017-15024 | 5.5 | Oct 5 | find_abstract_instance_name in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of… Affected: 2.29 |
| CVE-2017-15023 | 5.5 | Oct 5 | read_formatted_entries in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, does not properly validate the format count,… Affected: 2.29 |
| CVE-2017-15022 | 5.5 | Oct 5 | dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, does not validate the DW_AT_name data type, which allows remote attackers… Affected: 2.29 |
| CVE-2017-15021 | 5.5 | Oct 5 | bfd_get_debug_link_info_1 in opncls.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of… Affected: 2.29 |
| CVE-2017-14974 | 5.5 | Oct 2 | The *_get_synthetic_symtab functions in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, mishandle the failure of a certain… Affected: 2.29 |
| CVE-2017-14940 | 5.5 | Sep 30 | scan_unit_for_symbols in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of… Affected: 2.29 |
| CVE-2017-14939 | 5.5 | Sep 30 | decode_line_info in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, mishandles a length calculation, which allows remote… Affected: 2.29 |
| CVE-2017-14938 | 5.5 | Sep 30 | _bfd_elf_slurp_version_tables in elf.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of… Affected: 2.29 |
| CVE-2017-14934 | 5.5 | Sep 30 | process_debug_info in dwarf.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service… Affected: 2.29 |
| CVE-2017-14933 | 5.5 | Sep 30 | read_formatted_entries in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of… Affected: 2.29 |
| CVE-2017-14932 | 5.5 | Sep 30 | decode_line_info in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service… Affected: 2.29 |
| CVE-2017-14930 | 5.5 | Sep 30 | Memory leak in decode_line_info in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a… Affected: 2.29 |
| CVE-2017-14529 | 5.5 | Sep 18 | The pe_print_idata function in peXXigen.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, mishandles HintName vector entries, which… Affected: 2.29 |
| CVE-2017-14130 | 5.5 | Sep 4 | The _bfd_elf_parse_attributes function in elf-attrs.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to… Affected: 2.29 |
| CVE-2017-14129 | 5.5 | Sep 4 | The read_section function in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of… Affected: 2.29 |
| CVE-2017-14128 | 5.5 | Sep 4 | The decode_line_info function in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial… Affected: 2.29 |
| CVE-2017-13757 | 5.5 | Aug 29 | The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, does not validate the PLT section size, which allows remote attackers to cause a denial… Affected: 2.29 |
| CVE-2017-13716 | 5.5 | Aug 28 | The C++ symbol demangler routine in cplus-dem.c in libiberty, as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (excessive memory… Affected: 2.29 |
| CVE-2017-9955 | 5.5 | Jun 26 | The get_build_id function in opncls.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, allows remote attackers to cause a denial of… Affected: 2.28 |
| CVE-2017-9954 | 5.5 | Jun 26 | The getvalue function in tekhex.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, allows remote attackers to cause a denial of… Affected: 2.28 |
| CVE-2017-9044 | 5.5 | May 18 | The print_symbol_for_build_attribute function in readelf.c in GNU Binutils 2017-04-12 allows remote attackers to cause a denial of service (invalid read and SEGV) via a crafted… Affected: 2.28 |
| CVE-2017-9041 | 5.5 | May 18 | GNU Binutils 2.28 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted ELF file, related to MIPS GOT mishandling… Affected: 2.28 |
| CVE-2017-9040 | 5.5 | May 18 | GNU Binutils 2017-04-03 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash), related to the process_mips_specific function in… Affected: 2.28 |
| CVE-2017-9039 | 5.5 | May 18 | GNU Binutils 2.28 allows remote attackers to cause a denial of service (memory consumption) via a crafted ELF file with many program headers, related to the get_program_headers… Affected: 2.28 |
| CVE-2017-9038 | 5.5 | May 18 | GNU Binutils 2.28 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted ELF file, related to the… Affected: 2.28 |
| CVE-2017-8421 | 5.5 | May 2 | The function coff_set_alignment_hook in coffcode.h in Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, has a memory leak vulnerability which… Affected: 2.28 |
| CVE-2017-7299 | 5.5 | Mar 29 | The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, has an invalid read (of size 8) because the code to emit relocs (bfd_elf_final_link… Affected: 2.28 |
| CVE-2017-7224 | 5.5 | Mar 22 | The find_nearest_line function in objdump in GNU Binutils 2.28 is vulnerable to an invalid write (of size 1) while disassembling a corrupt binary that contains an empty function… Affected: 2.28 |
| CVE-2017-7210 | 5.5 | Mar 21 | objdump in GNU Binutils 2.28 is vulnerable to multiple heap-based buffer over-reads (of size 1 and size 8) while handling corrupt STABS enum type strings in a crafted object file,… Affected: 2.28 |
| CVE-2017-7209 | 5.5 | Mar 21 | The dump_section_as_bytes function in readelf in GNU Binutils 2.28 accesses a NULL pointer while reading section contents in a corrupt binary, leading to a program crash Affected: 2.28 |
| CVE-2017-6966 | 5.5 | Mar 17 | readelf in GNU Binutils 2.28 has a use-after-free (specifically read-after-free) error while processing multiple, relocated sections in an MSP430 binary Affected: 2.28 |
| CVE-2017-6965 | 5.5 | Mar 17 | readelf in GNU Binutils 2.28 writes to illegal addresses while processing corrupt input files containing symbol-difference relocations, leading to a heap-based buffer overflow Affected: 2.28 |
| CVE-2026-90831 | 5.3 | Sep 14 | GNU Binutils ELF String Table elf-strtab.c _bfd_elf_strtab_delref memory corruption Affected: 2.47 |
| CVE-2026-90830 | 5.3 | Sep 14 | GNU Binutils Section Merge merge.c _bfd_write_merged_section null pointer dereference Affected: 2.47 |
| CVE-2026-90829 | 5.3 | Sep 14 | GNU Binutils SHT_GROUP Section elf.c bfd_elf_set_group_contents null pointer dereference Affected: 2.47 |
| CVE-2025-1147 | 5.3 | Feb 10 | A vulnerability has been found in GNU Binutils 2.43 and classified as problematic Affected: 2.43 |
| CVE-2026-6845 | 5.0 | Apr 22 | Binutils: binutils: denial of service via crafted elf file Affected: All versions, or not specified |
| CVE-2025-69644 | 5.0 | Mar 6 | An issue was discovered in Binutils before 2.46 Affected: before 2.46 |
| CVE-2025-1182 | 5.0 | Feb 11 | A vulnerability, which was classified as critical, was found in GNU Binutils 2.43 Affected: 2.43 |
| CVE-2025-1181 | 5.0 | Feb 11 | A vulnerability classified as critical was found in GNU Binutils 2.43 Affected: 2.43 |
| CVE-2025-1176 | 5.0 | Feb 11 | A vulnerability was found in GNU Binutils 2.43 and classified as critical Affected: 2.43 |
| CVE-2026-90802 | 4.4 | Sep 14 | GNU Binutils ld libbfd.c bfd_putl64 null pointer dereference Affected: 2.47 |