BI
Product
Binutils
288
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 5High 112Medium 147Low 13
Watch
Add Binutils to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2017-7210 | 5.5 | Mar 21 | objdump in GNU Binutils 2.28 is vulnerable to multiple heap-based buffer over-reads (of size 1 and size 8) while handling corrupt STABS enum type strings in a crafted object file,… Affected: 2.28 |
| CVE-2017-7209 | 5.5 | Mar 21 | The dump_section_as_bytes function in readelf in GNU Binutils 2.28 accesses a NULL pointer while reading section contents in a corrupt binary, leading to a program crash Affected: 2.28 |
| CVE-2017-6966 | 5.5 | Mar 17 | readelf in GNU Binutils 2.28 has a use-after-free (specifically read-after-free) error while processing multiple, relocated sections in an MSP430 binary Affected: 2.28 |
| CVE-2017-6965 | 5.5 | Mar 17 | readelf in GNU Binutils 2.28 writes to illegal addresses while processing corrupt input files containing symbol-difference relocations, leading to a heap-based buffer overflow Affected: 2.28 |
| CVE-2026-90831 | 5.3 | Sep 14 | GNU Binutils ELF String Table elf-strtab.c _bfd_elf_strtab_delref memory corruption Affected: 2.47 |
| CVE-2026-90830 | 5.3 | Sep 14 | GNU Binutils Section Merge merge.c _bfd_write_merged_section null pointer dereference Affected: 2.47 |
| CVE-2026-90829 | 5.3 | Sep 14 | GNU Binutils SHT_GROUP Section elf.c bfd_elf_set_group_contents null pointer dereference Affected: 2.47 |
| CVE-2025-1147 | 5.3 | Feb 10 | A vulnerability has been found in GNU Binutils 2.43 and classified as problematic Affected: 2.43 |
| CVE-2026-6845 | 5.0 | Apr 22 | Binutils: binutils: denial of service via crafted elf file Affected: All versions, or not specified |
| CVE-2025-69644 | 5.0 | Mar 6 | An issue was discovered in Binutils before 2.46 Affected: before 2.46 |
| CVE-2025-1182 | 5.0 | Feb 11 | A vulnerability, which was classified as critical, was found in GNU Binutils 2.43 Affected: 2.43 |
| CVE-2025-1181 | 5.0 | Feb 11 | A vulnerability classified as critical was found in GNU Binutils 2.43 Affected: 2.43 |
| CVE-2025-1176 | 5.0 | Feb 11 | A vulnerability was found in GNU Binutils 2.43 and classified as critical Affected: 2.43 |
| CVE-2026-90802 | 4.4 | Sep 14 | GNU Binutils ld libbfd.c bfd_putl64 null pointer dereference Affected: 2.47 |
| CVE-2025-1152 | 3.7 | Feb 10 | A vulnerability classified as problematic has been found in GNU Binutils 2.43 Affected: 2.43 |
| CVE-2026-91782 | 3.3 | Sep 15 | GNU Binutils Dynamic Relocation Allocation elfxx-x86.c elf_x86_allocate_dynrelocs null pointer dereference Affected: 2.47 |
| CVE-2026-91781 | 3.3 | Sep 15 | GNU Binutils ELF Section elf64-x86-64.c elf_x86_64_common_section_index null pointer dereference Affected: 2.47 |
| CVE-2026-91780 | 3.3 | Sep 15 | GNU Binutils elflink.c elf_link_add_object_symbols null pointer dereference Affected: 2.47 |
| CVE-2026-91779 | 3.3 | Sep 15 | GNU Binutils Eh Frame elf-eh-frame.c _bfd_elf_eh_frame_section_offset null pointer dereference Affected: 2.47 |
| CVE-2025-8225 | 3.3 | Jul 27 | A vulnerability was found in GNU Binutils 2.44 and classified as problematic Affected: 2.44 |
| CVE-2020-35448 | 3.3 | Dec 27 | An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.35.1 Affected: 2.35.1 |
| CVE-2025-1180 | 3.1 | Feb 11 | A vulnerability classified as problematic has been found in GNU Binutils 2.43 Affected: 2.43 |
| CVE-2025-1151 | 3.1 | Feb 10 | A vulnerability was found in GNU Binutils 2.43 Affected: 2.43 |
| CVE-2025-1150 | 3.1 | Feb 10 | A vulnerability was found in GNU Binutils 2.43 Affected: 2.43 |
| CVE-2025-1149 | 3.1 | Feb 10 | A vulnerability was found in GNU Binutils 2.43 Affected: 2.43 |
| CVE-2025-1148 | 3.1 | Feb 10 | A vulnerability was found in GNU Binutils 2.43 and classified as problematic Affected: 2.43 |
| CVE-2025-66861 | 2.5 | Dec 29 | An issue was discovered in function d_unqualified_name in file cp-demangle.c in BinUtils 2.26 allowing attackers to cause a denial of service via crafted PE file Affected: 2.26 |
| CVE-2014-8738 | – | Jan 15 | The _bfd_slurp_extended_name_table function in bfd/archive.c in GNU binutils 2.24 and earlier allows remote attackers to cause a denial of service (invalid write, segmentation… Affected: through 2.24 |
| CVE-2014-8737 | – | Dec 9 | Multiple directory traversal vulnerabilities in GNU binutils 2.24 and earlier allow local users to delete arbitrary files via a Affected: through 2.24 |
| CVE-2014-8504 | – | Dec 9 | Stack-based buffer overflow in the srec_scan function in bfd/srec.c in GNU binutils 2.24 and earlier allows remote attackers to cause a denial of service (crash) and possibly have… Affected: through 2.24 |
| CVE-2014-8503 | – | Dec 9 | Stack-based buffer overflow in the ihex_scan function in bfd/ihex.c in GNU binutils 2.24 and earlier allows remote attackers to cause a denial of service (crash) and possibly have… Affected: through 2.24 |
| CVE-2014-8502 | – | Dec 9 | Heap-based buffer overflow in the pe_print_edata function in bfd/peXXigen.c in GNU binutils 2.24 and earlier allows remote attackers to cause a denial of service (crash) and… Affected: through 2.24 |
| CVE-2014-8501 | – | Dec 9 | The _bfd_XXi_swap_aouthdr_in function in bfd/peXXigen.c in GNU binutils 2.24 and earlier allows remote attackers to cause a denial of service (out-of-bounds write) and possibly… Affected: through 2.24 |
| CVE-2014-8485 | – | Dec 9 | The setup_group function in bfd/elf.c in libbfd in GNU binutils 2.24 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code… Affected: through 2.24 |
| CVE-2014-8484 | – | Dec 9 | The srec_scan function in bfd/srec.c in libdbfd in GNU binutils before 2.25 allows remote attackers to cause a denial of service (out-of-bounds read) via a small S-record Affected: through 2.24 |
| CVE-2012-3509 | – | Sep 5 | Multiple integer overflows in the (1) _objalloc_alloc function in objalloc.c and (2) objalloc_alloc macro in include/objalloc.h in GNU libiberty, as used by binutils 2.22, allow… Affected: 2.22 before 2.24 |
| CVE-2005-4807 | – | Dec 31 | Stack-based buffer overflow in the as_bad function in messages.c in the GNU as (gas) assembler in Free Software Foundation GNU Binutils before 20050721 allows attackers to execute… Affected: before 2.17 |
| CVE-2005-4808 | – | Dec 31 | Buffer overflow in reset_vars in config/tc-crx.c in the GNU as (gas) assembler in Free Software Foundation GNU Binutils before 20050714 allows user-assisted attackers to have an… Affected: before 2.17 |