pkg:Debian/binutils

All known vulnerabilities

• CRITICAL9.8CVE-2018-12699finish_stab in stabs.c in GNU Binutils 2.30 allows attackers to cause a denial of service (heap-based buffer overflow) or possibly have uns…
  from 0, < 2.32.51.20190707-1
• CRITICAL9.8CVE-2017-7614elflink.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, has a "member access within null p…
  from 0, < 2.28-4
• CRITICAL9.8CVE-2014-9939binutils - security update
  from 0, < 2.22-8+deb7u3
• CRITICAL9.8CVE-2014-9939binutils - security update
  from 0, < 2.25.90.20151125-1
• CRITICAL9.1CVE-2017-7226The pe_ILF_object_p function in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, is vulnerable t…
  from 0, < 2.27.51.20161212-1
• CRITICAL9.1CVE-2017-6969readelf in GNU Binutils 2.28 is vulnerable to a heap-based buffer over-read while processing corrupt RL78 binaries.
  from 0, < 2.28-3
• HIGH8.8CVE-2020-19726An issue was discovered in binutils libbfd.c 2.36 relating to the auxiliary symbol data allows attackers to read or write to system memory…
  from 0
• HIGH8.4CVE-2024-53589GNU objdump 2.43 is vulnerable to Buffer Overflow in the BFD (Binary File Descriptor) library's handling of tekhex format files.
  from 0
• HIGH7.8CVE-2026-6846A flaw was found in binutils.
  from 0
• HIGH7.8CVE-2025-11083A vulnerability has been found in GNU Binutils 2.45.
  from 0
• HIGH7.8CVE-2025-11082A flaw has been found in GNU Binutils 2.45.
  from 0
• HIGH7.8CVE-2025-7546A vulnerability, which was classified as problematic, has been found in GNU Binutils 2.45.
  from 0
• HIGH7.8CVE-2025-7545A vulnerability classified as problematic was found in GNU Binutils 2.45.
  from 0
• HIGH7.8CVE-2025-5245A vulnerability classified as critical has been found in GNU Binutils up to 2.44.
  from 0
• HIGH7.8CVE-2025-5244A vulnerability was found in GNU Binutils up to 2.44.
  from 0
• HIGH7.8CVE-2022-47696An issue was discovered Binutils objdump before 2.39.3 allows attackers to cause a denial of service or other unspecified impacts via funct…
  from 0
• HIGH7.8CVE-2022-47695An issue was discovered Binutils objdump before 2.39.3 allows attackers to cause a denial of service or other unspecified impacts via funct…
  from 0
• HIGH7.8CVE-2022-47673An issue was discovered in Binutils addr2line before 2.39.3, function parse_module contains multiple out of bound reads which may cause a d…
  from 0
• HIGH7.8CVE-2022-45703Heap buffer overflow vulnerability in binutils readelf before 2.40 via function display_debug_section in file readelf.c.
  from 0
• HIGH7.8CVE-2022-44840Heap buffer overflow vulnerability in binutils readelf before 2.40 via function find_section_in_set in file readelf.c.
  from 0
• HIGH7.8CVE-2023-1579Heap based buffer overflow in binutils-gdb/bfd/libbfd.c in bfd_getl64.
  from 0
• HIGH7.8CVE-2021-45078stab_xcoff_builtin_type in stabs.c in GNU Binutils through 2.37 allows attackers to cause a denial of service (heap-based buffer overflow)…
  from 0
• HIGH7.8CVE-2021-37322GCC c++filt v2.26 was discovered to contain a use-after-free vulnerability via the component cplus-dem.c.
  from 0, < 2.27.51.20161102-1
• HIGH7.8CVE-2021-20294A flaw was found in binutils readelf 2.35 program.
  from 0, < 2.35.2-1
• HIGH7.8CVE-2019-1010180GNU gdb All versions is affected by: Buffer Overflow - Out of bound memory access.
  from 0, < 2.32.51.20190707-1
• HIGH7.8CVE-2019-9077An issue was discovered in GNU Binutils 2.32.
  from 0, < 2.32.51.20190707-1
• HIGH7.8CVE-2019-9075An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32.
  from 0, < 2.32.51.20190707-1
• HIGH7.8CVE-2019-9070An issue was discovered in GNU libiberty, as distributed in GNU Binutils 2.32.
  from 0, < 2.32.51.20190707-1
• HIGH7.8CVE-2018-1000876binutils version 2.32 and earlier contains a Integer Overflow vulnerability in objdump, bfd_get_dynamic_reloc_upper_bound,bfd_canonicalize_…
  from 0, < 2.32.51.20190707-1
• HIGH7.8CVE-2018-19931An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils through 2.31.
  from 0, < 2.32.51.20190707-1
• HIGH7.8CVE-2018-18483The get_count function in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.31, allows remote attackers to cause a denial of s…
  from 0, < 2.32.51.20190707-1
• HIGH7.8CVE-2018-7643The display_debug_ranges function in dwarf.c in GNU Binutils 2.30 allows remote attackers to cause a denial of service (integer overflow an…
  from 0, < 2.30-6
• HIGH7.8CVE-2018-7208In the coff_pointerize_aux function in coffgen.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2…
  from 0, < 2.30-6
• HIGH7.8CVE-2018-6543In GNU Binutils 2.30, there's an integer overflow in the function load_specific_debug_section() in objdump.c, which results in `malloc()` w…
  from 0, < 2.30-3
• HIGH7.8CVE-2018-6323The elf_object_p function in elfcode.h in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1, has…
  from 0, < 2.30-3
• HIGH7.8CVE-2017-17126The load_debug_section function in readelf.c in GNU Binutils 2.29.1 allows remote attackers to cause a denial of service (invalid memory ac…
  from 0, < 2.29.90.20180122-1
• HIGH7.8CVE-2017-17125nm.c and objdump.c in GNU Binutils 2.29.1 mishandle certain global symbols, which allows remote attackers to cause a denial of service (_bf…
  from 0, < 2.29.90.20180122-1
• HIGH7.8CVE-2017-17124The _bfd_coff_read_string_table function in coffgen.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binut…
  from 0, < 2.29.90.20180122-1
• HIGH7.8CVE-2017-17122The dump_relocs_in_section function in objdump.c in GNU Binutils 2.29.1 does not check for reloc count integer overflows, which allows remo…
  from 0, < 2.29.90.20180122-1
• HIGH7.8CVE-2017-17121The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1, allows remote attackers to cause a denial of…
  from 0, < 2.29.90.20180122-1
• HIGH7.8CVE-2017-16832The pe_bfd_read_buildid function in peicode.h in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29…
  from 0, < 2.29.90.20180122-1
• HIGH7.8CVE-2017-16831coffgen.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1, does not validate the symbol cou…
  from 0, < 2.29.90.20180122-1
• HIGH7.8CVE-2017-16830The print_gnu_property_note function in readelf.c in GNU Binutils 2.29.1 does not have integer-overflow protection on 32-bit platforms, whi…
  from 0, < 2.29.90.20180122-1
• HIGH7.8CVE-2017-16829The _bfd_elf_parse_gnu_properties function in elf-properties.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in…
  from 0, < 2.29.90.20180122-1
• HIGH7.8CVE-2017-16828The display_debug_frames function in dwarf.c in GNU Binutils 2.29.1 allows remote attackers to cause a denial of service (integer overflow…
  from 0, < 2.29.90.20180122-1
• HIGH7.8CVE-2017-16827The aout_get_external_symbols function in aoutx.h in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils…
  from 0, < 2.29.90.20180122-1
• HIGH7.8CVE-2017-16826The coff_slurp_line_table function in coffcode.h in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2…
  from 0, < 2.29.90.20180122-1
• HIGH7.8CVE-2017-15996elfcomm.c in readelf in GNU Binutils 2.29 allows remote attackers to cause a denial of service (excessive memory allocation) or possibly ha…
  from 0, < 2.29.90.20180122-1
• HIGH7.8CVE-2017-15020dwarf1.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, mishandles pointers, which allows r…
  from 0, < 2.29.90.20180122-1
• HIGH7.8CVE-2017-14745The *_get_synthetic_symtab functions in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, interpr…
  from 0, < 2.29-11
• HIGH7.8CVE-2017-14729The *_get_synthetic_symtab functions in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, do not…
  from 0, < 2.29.1-2
• HIGH7.8CVE-2017-14333The process_version_sections function in readelf.c in GNU Binutils 2.29 allows attackers to cause a denial of service (Integer Overflow, an…
  from 0, < 2.29-9
• HIGH7.8CVE-2017-12799The elf_read_notesfunction in bfd/elf.c in GNU Binutils 2.29 allows remote attackers to cause a denial of service (buffer overflow and appl…
  from 0, < 2.29-9
• HIGH7.8CVE-2017-12459The bfd_mach_o_read_symtab_strtab function in bfd/mach-o.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU…
  from 0, < 2.29-8
• HIGH7.8CVE-2017-12458The nlm_swap_auxiliary_headers_in function in bfd/nlmcode.h in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU…
  from 0, < 2.29-8
• HIGH7.8CVE-2017-12457The bfd_make_section_with_flags function in section.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binut…
  from 0, < 2.29-8
• HIGH7.8CVE-2017-12456The read_symbol_stabs_debugging_info function in rddbg.c in GNU Binutils 2.29 and earlier allows remote attackers to cause an out of bounds…
  from 0, < 2.29-9
• HIGH7.8CVE-2017-12455The evax_bfd_print_emh function in vms-alpha.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.2…
  from 0, < 2.29-8
• HIGH7.8CVE-2017-12454The _bfd_vms_slurp_egsd function in bfd/vms-alpha.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutil…
  from 0, < 2.29-9
• HIGH7.8CVE-2017-12453The _bfd_vms_slurp_eeom function in libbfd.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29…
  from 0, < 2.29-9
• HIGH7.8CVE-2017-12452The bfd_mach_o_i386_canonicalize_one_reloc function in bfd/mach-o-i386.c in the Binary File Descriptor (BFD) library (aka libbfd), as distr…
  from 0, < 2.29-9
• HIGH7.8CVE-2017-12451The _bfd_xcoff_read_ar_hdr function in bfd/coff-rs6000.c and bfd/coff64-rs6000.c in the Binary File Descriptor (BFD) library (aka libbfd),…
  from 0, < 2.29-9
• HIGH7.8CVE-2017-12450The alpha_vms_object_p function in bfd/vms-alpha.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils…
  from 0, < 2.29-9
• HIGH7.8CVE-2017-12449The _bfd_vms_save_sized_string function in vms-misc.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binut…
  from 0, < 2.29-8
• HIGH7.8CVE-2017-12448The bfd_cache_close function in bfd/cache.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29 a…
  from 0, < 2.29-9
• HIGH7.8CVE-2017-9756The aarch64_ext_ldst_reglist function in opcodes/aarch64-dis.c in GNU Binutils 2.28 allows remote attackers to cause a denial of service (b…
  from 0, < 2.29-1
• HIGH7.8CVE-2017-9755opcodes/i386-dis.c in GNU Binutils 2.28 does not consider the number of registers for bnd mode, which allows remote attackers to cause a de…
  from 0, < 2.29-1
• HIGH7.8CVE-2017-9754The process_otr function in bfd/versados.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, d…
  from 0, < 2.29-1
• HIGH7.8CVE-2017-9753The versados_mkobject function in bfd/versados.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2…
  from 0, < 2.29-1
• HIGH7.8CVE-2017-9752bfd/vms-alpha.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, allows remote attackers to c…
  from 0, < 2.29-1
• HIGH7.8CVE-2017-9751opcodes/rl78-decode.opc in GNU Binutils 2.28 has an unbounded GETBYTE macro, which allows remote attackers to cause a denial of service (bu…
  from 0, < 2.29-1
• HIGH7.8CVE-2017-9750opcodes/rx-decode.opc in GNU Binutils 2.28 lacks bounds checks for certain scale arrays, which allows remote attackers to cause a denial of…
  from 0, < 2.29-1
• HIGH7.8CVE-2017-9749The *regs* macros in opcodes/bfin-dis.c in GNU Binutils 2.28 allow remote attackers to cause a denial of service (buffer overflow and appli…
  from 0, < 2.29-1
• HIGH7.8CVE-2017-9748The ieee_object_p function in bfd/ieee.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, mig…
  from 0, < 2.29-1
• HIGH7.8CVE-2017-9747The ieee_archive_p function in bfd/ieee.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, mi…
  from 0, < 2.29-1
• HIGH7.8CVE-2017-9746The disassemble_bytes function in objdump.c in GNU Binutils 2.28 allows remote attackers to cause a denial of service (buffer overflow and…
  from 0, < 2.29-1
• HIGH7.8CVE-2017-9745The _bfd_vms_slurp_etir function in bfd/vms-alpha.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutil…
  from 0, < 2.29-1
• HIGH7.8CVE-2017-9744The sh_elf_set_mach_from_flags function in bfd/elf32-sh.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU B…
  from 0, < 2.29-1
• HIGH7.8CVE-2017-9743The print_insn_score32 function in opcodes/score7-dis.c:552 in GNU Binutils 2.28 allows remote attackers to cause a denial of service (buff…
  from 0, < 2.29-1
• HIGH7.8CVE-2017-9742The score_opcodes function in opcodes/score7-dis.c in GNU Binutils 2.28 allows remote attackers to cause a denial of service (buffer overfl…
  from 0, < 2.29-1
• HIGH7.8CVE-2017-9043readelf.c in GNU Binutils 2017-04-12 has a "shift exponent too large for type unsigned long" issue, which might allow remote attackers to c…
  from 0, < 2.29-1
• HIGH7.8CVE-2017-9042readelf.c in GNU Binutils 2017-04-12 has a "cannot be represented in type long" issue, which might allow remote attackers to cause a denial…
  from 0, < 2.29-1
• HIGH7.8CVE-2016-2226Integer overflow in the string_appends function in cplus-dem.c in libiberty allows remote attackers to execute arbitrary code via a crafted…
  from 0, < 2.27.51.20161102-1
• HIGH7.5CVE-2025-69650GNU Binutils thru 2.46 readelf contains a double free vulnerability when processing a crafted ELF binary with malformed relocation data.
  from 0
• HIGH7.5CVE-2025-69649GNU Binutils thru 2.46 readelf contains a null pointer dereference vulnerability when processing a crafted ELF binary with malformed header…
  from 0
• HIGH7.5CVE-2025-66866An issue was discovered in function d_abi_tags in file cp-demangle.c in BinUtils 2.26 allows attackers to cause a denial of service via cra…
  from 0
• HIGH7.5CVE-2025-66865An issue was discovered in function d_print_comp_inner in file cp-demangle.c in BinUtils 2.26 allows attackers to cause a denial of service…
  from 0
• HIGH7.5CVE-2025-66864An issue was discovered in function d_print_comp_inner in file cp-demangle.c in BinUtils 2.26 allows attackers to cause a denial of service…
  from 0
• HIGH7.5CVE-2025-66863An issue was discovered in function d_discriminator in file cp-demangle.c in BinUtils 2.26 allows attackers to cause a denial of service vi…
  from 0
• HIGH7.5CVE-2025-66862A buffer overflow vulnerability in function gnu_special in file cplus-dem.c in BinUtils 2.26 allows attackers to cause a denial of service…
  from 0
• HIGH7.5CVE-2025-1179A vulnerability was found in GNU Binutils 2.43.
  from 0
• HIGH7.5CVE-2025-0840A vulnerability, which was classified as problematic, was found in GNU Binutils up to 2.43.
  from 0
• HIGH7.5CVE-2021-46174Heap-based Buffer Overflow in function bfd_getl32 in Binutils objdump 3.37.
  from 0
• HIGH7.5CVE-2020-35342GNU Binutils before 2.34 has an uninitialized-heap vulnerability in function tic4x_print_cond (file opcodes/tic4x-dis.c) which could allow…
  from 0, < 2.33.50.20200107-1
• HIGH7.5CVE-2021-3530A flaw was discovered in GNU libiberty within demangle_path() in rust-demangle.c, as distributed in GNU Binutils version 2.36.
  from 0
• HIGH7.5CVE-2018-12934remember_Ktype in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30, allows attackers to trigger excessive memory consumpti…
  from 0, < 2.32.51.20190707-1
• HIGH7.5CVE-2018-12698demangle_template in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30, allows attackers to trigger excessive memory consum…
  from 0, < 2.32.51.20190707-1
• HIGH7.5CVE-2018-12697A NULL pointer dereference (aka SEGV on unknown address 0x000000000000) was discovered in work_stuff_copy_to_from in cplus-dem.c in GNU lib…
  from 0, < 2.32.51.20190707-1
• HIGH7.5CVE-2017-15938dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, miscalculates DW_FORM_ref_addr die…
  from 0, < 2.29.90.20180122-1
• HIGH7.5CVE-2017-13710The setup_group function in elf.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows rem…
  from 0, < 2.29-9
• HIGH7.5CVE-2017-8398dwarf.c in GNU Binutils 2.28 is vulnerable to an invalid read of size 1 during dumping of debug information from a corrupt binary.
  from 0, < 2.28-5
• HIGH7.5CVE-2017-8397The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, is vulnerable to an invalid read of size 1 and…
  from 0, < 2.28-5
• HIGH7.5CVE-2017-8396The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, is vulnerable to an invalid read of size 1 beca…
  from 0, < 2.28-5
• HIGH7.5CVE-2017-8395The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, is vulnerable to an invalid write of size 8 bec…
  from 0, < 2.28-5
• HIGH7.5CVE-2017-8394The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, is vulnerable to an invalid read of size 4 due…
  from 0, < 2.28-5
• HIGH7.5CVE-2017-8393The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, is vulnerable to a global buffer over-read erro…
  from 0, < 2.28-5
• HIGH7.5CVE-2017-7304The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, is vulnerable to an invalid read (of size 8) be…
  from 0, < 2.27.51.20161212-1
• HIGH7.5CVE-2017-7303The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, is vulnerable to an invalid read (of size 4) be…
  from 0, < 2.27.51.20161212-1
• HIGH7.5CVE-2017-7302The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, has a swap_std_reloc_out function in bfd/aoutx.…
  from 0, < 2.27.51.20161212-1
• HIGH7.5CVE-2017-7301The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, has an aout_link_add_symbols function in bfd/ao…
  from 0, < 2.27.51.20161212-1
• HIGH7.5CVE-2017-7300The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, has an aout_link_add_symbols function in bfd/ao…
  from 0, < 2.27.51.20161212-1
• HIGH7.5CVE-2017-7227GNU linker (ld) in GNU Binutils 2.28 is vulnerable to a heap-based buffer overflow while processing a bogus input script, leading to a prog…
  from 0, < 2.27.51.20161212-1
• HIGH7.5CVE-2017-7225The find_nearest_line function in addr2line in GNU Binutils 2.28 does not handle the case where the main file name and the directory name a…
  from 0, < 2.27.51.20161201-1
• HIGH7.5CVE-2017-7223GNU assembler in GNU Binutils 2.28 is vulnerable to a global buffer overflow (of size 1) while attempting to unget an EOF character from th…
  from 0, < 2.27.51.20161212-1
• HIGH7.5CVE-2016-6131The demangler in GNU Libiberty allows remote attackers to cause a denial of service (infinite loop, stack overflow, and crash) via a cycle…
  from 0, < 2.27.51.20161102-1
• HIGH7.3CVE-2006-2362Buffer overflow in getsym in tekhex.c in libbfd in Free Software Foundation GNU Binutils before 20060423, as used by GNU strings, allows co…
  from 0, < 2.17-1
• HIGH7.1CVE-2026-3442A flaw was found in GNU Binutils.
  from 0
• HIGH7.1CVE-2026-3441A flaw was found in GNU Binutils.
  from 0
• HIGH7.1CVE-2023-25584An out-of-bounds read flaw was found in the parse_module function in bfd/vms-alpha.c in Binutils.
  from 0
• HIGH7.1CVE-2021-3549An out of bounds flaw was found in GNU binutils objdump utility version 2.36.
  from 0
• MEDIUM6.5CVE-2021-32256An issue was discovered in GNU libiberty, as distributed in GNU Binutils 2.36.
  from 0
• MEDIUM6.5CVE-2023-1972A potential heap based buffer overflow was found in _bfd_elf_slurp_version_tables() in bfd/elf.c.
  from 0
• MEDIUM6.5CVE-2021-3826Heap/stack buffer overflow in the dlang_lname function in d-demangle.c in libiberty allows attackers to potentially cause a denial of servi…
  from 0
• MEDIUM6.5CVE-2019-17451An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32.
  from 0, < 2.34-1
• MEDIUM6.5CVE-2019-17450find_abstract_instance in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32, allows re…
  from 0, < 2.34-1
• MEDIUM6.5CVE-2018-20712A heap-based buffer over-read exists in the function d_expression_1 in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31.…
  from 0
• MEDIUM6.5CVE-2018-17794An issue was discovered in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.31.
  from 0, < 2.32.51.20190707-1
• MEDIUM6.5CVE-2018-10373concat_filename in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, allows remote at…
  from 0, < 2.30.90.20180627-1
• MEDIUM6.5CVE-2017-12967The getsym function in tekhex.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remot…
  from 0, < 2.29-5
• MEDIUM6.3CVE-2021-20197There is an open race window when writing output in the following utilities in GNU binutils version 2.35 and earlier:ar, objcopy, strip, ra…
  from 0
• MEDIUM6.2CVE-2025-69648GNU Binutils thru 2.45.1 readelf contains a denial-of-service vulnerability when processing a crafted binary with malformed DWARF .debug_rn…
  from 0
• MEDIUM6.2CVE-2025-69647GNU Binutils thru 2.45.1 readelf contains a denial-of-service vulnerability when processing a crafted binary with malformed DWARF loclists…
  from 0
• MEDIUM6.2CVE-2025-69652GNU Binutils thru 2.46 readelf contains a vulnerability that leads to an abort (SIGABRT) when processing a crafted ELF binary with malforme…
  from 0
• MEDIUM6.1CVE-2026-4647A flaw was found in the GNU Binutils BFD library, a widely used component for handling binary files such as object files and executables.
  from 0
• MEDIUM6.1CVE-2020-35494There's a flaw in binutils /opcodes/tic4x-dis.c.
  from 0, < 2.33.50.20200107-1
• MEDIUM5.9CVE-2025-1153A vulnerability classified as problematic was found in GNU Binutils 2.43/2.44.
  from 0
• MEDIUM5.5CVE-2026-6844A flaw was found in the `readelf` utility of the binutils package.
  from 0
• MEDIUM5.5CVE-2025-69651GNU Binutils thru 2.46 readelf contains a vulnerability that leads to an invalid pointer free when processing a crafted ELF binary with mal…
  from 0
• MEDIUM5.5CVE-2025-69646Binutils objdump contains a denial-of-service vulnerability when processing a crafted binary with malformed DWARF debug_rnglists data.
  from 0
• MEDIUM5.5CVE-2025-69645Binutils objdump contains a denial-of-service vulnerability when processing a crafted binary with malformed DWARF debug information.
  from 0
• MEDIUM5.5CVE-2025-11840A weakness has been identified in GNU Binutils 2.45.
  from 0
• MEDIUM5.5CVE-2025-11839A security flaw has been discovered in GNU Binutils 2.45.
  from 0
• MEDIUM5.5CVE-2025-11495A vulnerability was determined in GNU Binutils 2.45.
  from 0
• MEDIUM5.5CVE-2025-11494A vulnerability was found in GNU Binutils 2.45.
  from 0
• MEDIUM5.5CVE-2025-11414A vulnerability was determined in GNU Binutils 2.45.
  from 0
• MEDIUM5.5CVE-2025-11413A vulnerability was found in GNU Binutils 2.45.
  from 0
• MEDIUM5.5CVE-2025-11412A vulnerability has been found in GNU Binutils 2.45.
  from 0
• MEDIUM5.5CVE-2025-11081A vulnerability was detected in GNU Binutils 2.45.
  from 0
• MEDIUM5.5CVE-2025-8224A vulnerability has been found in GNU Binutils 2.44 and classified as problematic.
  from 0
• MEDIUM5.5CVE-2025-3198A vulnerability has been found in GNU Binutils 2.43/2.44 and classified as problematic.
  from 0
• MEDIUM5.5CVE-2024-57360https://www.gnu.org/software/binutils/ nm >=2.43 is affected by: Incorrect Access Control.
  from 0
• MEDIUM5.5CVE-2023-25588A flaw was found in Binutils.
  from 0
• MEDIUM5.5CVE-2023-25586A flaw was found in Binutils.
  from 0
• MEDIUM5.5CVE-2023-25585A flaw was found in Binutils.
  from 0
• MEDIUM5.5CVE-2022-48065GNU Binutils before 2.40 was discovered to contain a memory leak vulnerability var the function find_abstract_instance in dwarf2.c.
  from 0
• MEDIUM5.5CVE-2022-48064GNU Binutils before 2.40 was discovered to contain an excessive memory consumption vulnerability via the function bfd_dwarf2_find_nearest_l…
  from 0
• MEDIUM5.5CVE-2022-48063GNU Binutils before 2.40 was discovered to contain an excessive memory consumption vulnerability via the function load_separate_debug_files…
  from 0
• MEDIUM5.5CVE-2022-47011An issue was discovered function parse_stab_struct_fields in stabs.c in Binutils 2.34 thru 2.38, allows attackers to cause a denial of serv…
  from 0
• MEDIUM5.5CVE-2022-47010An issue was discovered function pr_function_type in prdbg.c in Binutils 2.34 thru 2.38, allows attackers to cause a denial of service due…
  from 0
• MEDIUM5.5CVE-2022-47008An issue was discovered function make_tempdir, and make_tempname in bucomm.c in Binutils 2.34 thru 2.38, allows attackers to cause a denial…
  from 0
• MEDIUM5.5CVE-2022-47007An issue was discovered function stab_demangle_v3_arg in stabs.c in Binutils 2.34 thru 2.38, allows attackers to cause a denial of service…
  from 0
• MEDIUM5.5CVE-2022-35206Null pointer dereference vulnerability in Binutils readelf 2.38.50 via function read_and_display_attr_value in file dwarf.c.
  from 0
• MEDIUM5.5CVE-2022-35205An issue was discovered in Binutils readelf 2.38.50, reachable assertion failure in function display_debug_names allows attackers to cause…
  from 0
• MEDIUM5.5CVE-2020-21490An issue was discovered in GNU Binutils 2.34.
  from 0, < 2.33.50.20200107-1
• MEDIUM5.5CVE-2020-19724A memory consumption issue in get_data function in binutils/nm.c in GNU nm before 2.34 allows attackers to cause a denial of service via cr…
  from 0, < 2.33.50.20200114-1
• MEDIUM5.5CVE-2022-4285An illegal memory access flaw was found in the binutils package.
  from 0
• MEDIUM5.5CVE-2022-38533In GNU Binutils before 2.40, there is a heap-buffer-overflow in the error function bfd_getl32 when called from the strip_main function in s…
  from 0
• MEDIUM5.5CVE-2021-46195GCC v12.0 was discovered to contain an uncontrolled recursion via the component libiberty/rust-demangle.c.
  from 0
• MEDIUM5.5CVE-2021-20284A flaw was found in GNU Binutils 2.35.1, where there is a heap-based buffer overflow in _bfd_elf_slurp_secondary_reloc_section in elf.c due…
  from 0
• MEDIUM5.5CVE-2020-35507There's a flaw in bfd_pef_parse_function_stubs of bfd/pef.c in binutils in versions prior to 2.34 which could allow an attacker who is able…
  from 0, < 2.33.50.20200107-1
• MEDIUM5.5CVE-2020-35496There's a flaw in bfd_pef_scan_start_address() of bfd/pef.c in binutils which could allow an attacker who is able to submit a crafted file…
  from 0, < 2.33.50.20200107-1
• MEDIUM5.5CVE-2020-35495There's a flaw in binutils /bfd/pef.c.
  from 0, < 2.33.50.20200107-1
• MEDIUM5.5CVE-2020-35493A flaw exists in binutils in bfd/pef.c.
  from 0, < 2.33.50.20200107-1
• MEDIUM5.5CVE-2020-16599A Null Pointer Dereference vulnerability exists in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.…
  from 0, < 2.35-1
• MEDIUM5.5CVE-2020-16593A Null Pointer Dereference vulnerability exists in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.…
  from 0, < 2.35-1
• MEDIUM5.5CVE-2020-16592A use after free issue exists in the Binary File Descriptor (BFD) library (aka libbfd) in GNU Binutils 2.34 in bfd_hash_lookup, as demonstr…
  from 0, < 2.35-1
• MEDIUM5.5CVE-2020-16591A Denial of Service vulnerability exists in the Binary File Descriptor (BFD) in GNU Binutils 2.35 due to an invalid read in process_symbol_…
  from 0, < 2.35-1
• MEDIUM5.5CVE-2020-16590A double free vulnerability exists in the Binary File Descriptor (BFD) (aka libbrd) in GNU Binutils 2.35 in the process_symbol_table, as de…
  from 0, < 2.35-1
• MEDIUM5.5CVE-2019-14444apply_relocations in readelf.c in GNU Binutils 2.32 contains an integer overflow that allows attackers to trigger a write access violation…
  from 0, < 2.32.51.20190813-1
• MEDIUM5.5CVE-2019-14250An issue was discovered in GNU libiberty, as distributed in GNU Binutils 2.32.
  from 0, < 2.33-1
• MEDIUM5.5CVE-2019-1010204GNU binutils gold gold v1.11-v1.16 (GNU binutils v2.21-v2.31.1) is affected by: Improper Input Validation, Signed/Unsigned Comparison, Out-…
  from 0
• MEDIUM5.5CVE-2019-12972An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32.
  from 0, < 2.32.51.20190707-1
• MEDIUM5.5CVE-2019-9074An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32.
  from 0, < 2.32.51.20190707-1
• MEDIUM5.5CVE-2019-9073An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32.
  from 0, < 2.32.51.20190707-1
• MEDIUM5.5CVE-2019-9071An issue was discovered in GNU libiberty, as distributed in GNU Binutils 2.32.
  from 0, < 2.32.51.20190707-1
• MEDIUM5.5CVE-2018-20673The demangle_template function in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.31.1, contains an integer overflow vulnera…
  from 0
• MEDIUM5.5CVE-2018-20671load_specific_debug_section in objdump.c in GNU Binutils through 2.31.1 contains an integer overflow vulnerability that can trigger a heap-…
  from 0, < 2.32.51.20190707-1
• MEDIUM5.5CVE-2018-20651A NULL pointer dereference was discovered in elf_link_add_object_symbols in elflink.c in the Binary File Descriptor (BFD) library (aka libb…
  from 0, < 2.32.51.20190707-1
• MEDIUM5.5CVE-2018-20623In GNU Binutils 2.31.1, there is a use-after-free in the error function in elfcomm.c when called from the process_archive function in reade…
  from 0, < 2.32.51.20190707-1
• MEDIUM5.5CVE-2018-20002The _bfd_generic_read_minisymbols function in syms.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binuti…
  from 0, < 2.32.51.20190707-1
• MEDIUM5.5CVE-2018-19932An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils through 2.31.
  from 0, < 2.32.51.20190707-1
• MEDIUM5.5CVE-2018-18701An issue was discovered in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31.
  from 0, < 2.32.51.20190707-1
• MEDIUM5.5CVE-2018-18700An issue was discovered in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31.
  from 0, < 2.32.51.20190707-1
• MEDIUM5.5CVE-2018-18607An issue was discovered in elf_link_input_bfd in elflink.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU…
  from 0, < 2.32.51.20190707-1
• MEDIUM5.5CVE-2018-18606An issue was discovered in the merge_strings function in merge.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed i…
  from 0, < 2.32.51.20190707-1
• MEDIUM5.5CVE-2018-18605A heap-based buffer over-read issue was discovered in the function sec_merge_hash_lookup in merge.c in the Binary File Descriptor (BFD) lib…
  from 0, < 2.32.51.20190707-1
• MEDIUM5.5CVE-2018-18484An issue was discovered in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31.
  from 0, < 2.32.51.20190707-1
• MEDIUM5.5CVE-2018-18309An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31.
  from 0, < 2.32.51.20190707-1
• MEDIUM5.5CVE-2018-17985An issue was discovered in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31.
  from 0, < 2.32.51.20190707-1
• MEDIUM5.5CVE-2018-17360An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31.
  from 0, < 2.32.51.20190707-1
• MEDIUM5.5CVE-2018-17359An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31.
  from 0, < 2.32.51.20190707-1
• MEDIUM5.5CVE-2018-17358An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31.
  from 0, < 2.32.51.20190707-1
• MEDIUM5.5CVE-2018-13033The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, allows remote attackers to cause a denial of se…
  from 0, < 2.30.90.20180627-1
• MEDIUM5.5CVE-2018-10535The ignore_section_sym function in elf.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, doe…
  from 0, < 2.30.90.20180627-1
• MEDIUM5.5CVE-2018-10534The _bfd_XX_bfd_copy_private_bfd_data_common function in peXXigen.c in the Binary File Descriptor (BFD) library (aka libbfd), as distribute…
  from 0, < 2.30.90.20180627-1
• MEDIUM5.5CVE-2018-10372process_cu_tu_index in dwarf.c in GNU Binutils 2.30 allows remote attackers to cause a denial of service (heap-based buffer over-read and a…
  from 0, < 2.30.90.20180627-1
• MEDIUM5.5CVE-2018-9996An issue was discovered in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30.
  from 0
• MEDIUM5.5CVE-2018-9138An issue was discovered in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.29 and 2.30.
  from 0, < 2.32.51.20190707-1
• MEDIUM5.5CVE-2018-8945The bfd_section_from_shdr function in elf.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30,…
  from 0, < 2.30.90.20180627-1
• MEDIUM5.5CVE-2018-7642The swap_std_reloc_in function in aoutx.h in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, al…
  from 0, < 2.30-6
• MEDIUM5.5CVE-2018-7570The assign_file_positions_for_non_load_sections function in elf.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed…
  from 0, < 2.30-6
• MEDIUM5.5CVE-2018-7569dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, allows remote attackers to cause a…
  from 0, < 2.30-6
• MEDIUM5.5CVE-2018-7568The parse_die function in dwarf1.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, allows re…
  from 0, < 2.30-6
• MEDIUM5.5CVE-2018-6872The elf_parse_notes function in elf.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, allows…
  from 0, < 2.30-4
• MEDIUM5.5CVE-2018-6759The bfd_get_debug_link_info_1 function in opncls.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils…
  from 0, < 2.30-3
• MEDIUM5.5CVE-2017-17123The coff_slurp_reloc_table function in coffcode.h in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils…
  from 0, < 2.29.90.20180122-1
• MEDIUM5.5CVE-2017-17080elf.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1, does not validate sizes of core note…
  from 0, < 2.29.90.20180122-1
• MEDIUM5.5CVE-2017-15225_bfd_dwarf2_cleanup_debug_info in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, a…
  from 0, < 2.29.90.20180122-1
• MEDIUM5.5CVE-2017-15025decode_line_info in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote a…
  from 0, < 2.29.90.20180122-1
• MEDIUM5.5CVE-2017-15024find_abstract_instance_name in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allo…
  from 0, < 2.29.90.20180122-1
• MEDIUM5.5CVE-2017-15023read_formatted_entries in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, does not…
  from 0, < 2.29.90.20180122-1
• MEDIUM5.5CVE-2017-15022dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, does not validate the DW_AT_name da…
  from 0, < 2.29.90.20180122-1
• MEDIUM5.5CVE-2017-15021bfd_get_debug_link_info_1 in opncls.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows…
  from 0, < 2.29.90.20180122-1
• MEDIUM5.5CVE-2017-14974The *_get_synthetic_symtab functions in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, mishand…
  from 0, < 2.29.1-2
• MEDIUM5.5CVE-2017-14940scan_unit_for_symbols in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows rem…
  from 0, < 2.29.90.20180122-1
• MEDIUM5.5CVE-2017-14939decode_line_info in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, mishandles a le…
  from 0, < 2.29.90.20180122-1
• MEDIUM5.5CVE-2017-14938_bfd_elf_slurp_version_tables in elf.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allow…
  from 0, < 2.29.90.20180122-1
• MEDIUM5.5CVE-2017-14934process_debug_info in dwarf.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote…
  from 0, < 2.29.90.20180122-1
• MEDIUM5.5CVE-2017-14933read_formatted_entries in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows re…
  from 0, < 2.29.90.20180122-1
• MEDIUM5.5CVE-2017-14932decode_line_info in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote a…
  from 0, < 2.29.90.20180122-1
• MEDIUM5.5CVE-2017-14930Memory leak in decode_line_info in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29,…
  from 0, < 2.29.90.20180122-1
• MEDIUM5.5CVE-2017-14529The pe_print_idata function in peXXigen.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, mi…
  from 0, < 2.29-10
• MEDIUM5.5CVE-2017-14130The _bfd_elf_parse_attributes function in elf-attrs.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binut…
  from 0, < 2.29-9
• MEDIUM5.5CVE-2017-14129The read_section function in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows…
  from 0, < 2.29-10
• MEDIUM5.5CVE-2017-14128The decode_line_info function in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, al…
  from 0, < 2.29-9
• MEDIUM5.5CVE-2017-13757The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, does not validate the PLT section size, which a…
  from 0, < 2.29-10
• MEDIUM5.5CVE-2017-13716The C++ symbol demangler routine in cplus-dem.c in libiberty, as distributed in GNU Binutils 2.29, allows remote attackers to cause a denia…
  from 0
• MEDIUM5.5CVE-2017-9955The get_build_id function in opncls.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, allows…
  from 0, < 2.29-1
• MEDIUM5.5CVE-2017-9954The getvalue function in tekhex.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, allows rem…
  from 0, < 2.29-1
• MEDIUM5.5CVE-2017-9044The print_symbol_for_build_attribute function in readelf.c in GNU Binutils 2017-04-12 allows remote attackers to cause a denial of service…
  from 0, < 2.29-1
• MEDIUM5.5CVE-2017-9041GNU Binutils 2.28 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted EL…
  from 0, < 2.28-6
• MEDIUM5.5CVE-2017-9040GNU Binutils 2017-04-03 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash), related to t…
  from 0, < 2.29-1
• MEDIUM5.5CVE-2017-9039GNU Binutils 2.28 allows remote attackers to cause a denial of service (memory consumption) via a crafted ELF file with many program header…
  from 0, < 2.28-6
• MEDIUM5.5CVE-2017-9038GNU Binutils 2.28 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted EL…
  from 0, < 2.28-6
• MEDIUM5.5CVE-2017-8421The function coff_set_alignment_hook in coffcode.h in Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.2…
  from 0, < 2.28-5
• MEDIUM5.5CVE-2017-7299The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, has an invalid read (of size 8) because the cod…
  from 0, < 2.27.51.20161220-1
• MEDIUM5.5CVE-2017-7224The find_nearest_line function in objdump in GNU Binutils 2.28 is vulnerable to an invalid write (of size 1) while disassembling a corrupt…
  from 0, < 2.27.51.20161201-1
• MEDIUM5.5CVE-2017-7210objdump in GNU Binutils 2.28 is vulnerable to multiple heap-based buffer over-reads (of size 1 and size 8) while handling corrupt STABS enu…
  from 0, < 2.28-3
• MEDIUM5.5CVE-2017-7209The dump_section_as_bytes function in readelf in GNU Binutils 2.28 accesses a NULL pointer while reading section contents in a corrupt bina…
  from 0, < 2.28-3
• MEDIUM5.5CVE-2017-6966readelf in GNU Binutils 2.28 has a use-after-free (specifically read-after-free) error while processing multiple, relocated sections in an…
  from 0, < 2.28-3
• MEDIUM5.5CVE-2017-6965readelf in GNU Binutils 2.28 writes to illegal addresses while processing corrupt input files containing symbol-difference relocations, lea…
  from 0, < 2.28-3
• MEDIUM5.5CVE-2016-4493The demangle_template_value_parm and do_hpacc_template_literal functions in cplus-dem.c in libiberty allow remote attackers to cause a deni…
  from 0, < 2.27.51.20161102-1
• MEDIUM5.5CVE-2016-4491The d_print_comp function in cp-demangle.c in libiberty allows remote attackers to cause a denial of service (segmentation fault and crash)…
  from 0, < 2.28-3
• MEDIUM5.5CVE-2016-4490Integer overflow in cp-demangle.c in libiberty allows remote attackers to cause a denial of service (segmentation fault and crash) via a cr…
  from 0, < 2.27.51.20161102-1
• MEDIUM5.5CVE-2016-4489Integer overflow in the gnu_special function in libiberty allows remote attackers to cause a denial of service (segmentation fault and cras…
  from 0, < 2.27.51.20161102-1
• MEDIUM5.5CVE-2016-4488Use-after-free vulnerability in libiberty allows remote attackers to cause a denial of service (segmentation fault and crash) via a crafted…
  from 0, < 2.27.51.20161102-1
• MEDIUM5.5CVE-2016-4487Use-after-free vulnerability in libiberty allows remote attackers to cause a denial of service (segmentation fault and crash) via a crafted…
  from 0, < 2.27.51.20161102-1
• MEDIUM5.3CVE-2025-1147A vulnerability has been found in GNU Binutils 2.43 and classified as problematic.
  from 0
• MEDIUM5.0CVE-2026-6845A flaw was found in binutils, specifically within the `readelf` utility.
  from 0
• MEDIUM5.0CVE-2025-69644An issue was discovered in Binutils before 2.46.
  from 0
• MEDIUM5.0CVE-2025-1176A vulnerability was found in GNU Binutils 2.43 and classified as critical.
  from 0
• MEDIUM4.4CVE-2016-4492Buffer overflow in the do_type function in cplus-dem.c in libiberty allows remote attackers to cause a denial of service (segmentation faul…
  from 0, < 2.27.51.20161102-1
• LOW3.7CVE-2025-1152A vulnerability classified as problematic has been found in GNU Binutils 2.43.
  from 0
• LOW3.3CVE-2020-35448An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.35.1.
  from 0
• LOW3.1CVE-2025-1150A vulnerability was found in GNU Binutils 2.43.
  from 0
• LOW3.1CVE-2025-1149A vulnerability was found in GNU Binutils 2.43.
  from 0
• LOW3.1CVE-2025-1148A vulnerability was found in GNU Binutils 2.43 and classified as problematic.
  from 0
• LOW2.5CVE-2025-66861An issue was discovered in function d_unqualified_name in file cp-demangle.c in BinUtils 2.26 allowing attackers to cause a denial of servi…
  from 0
• —CVE-2025-8225A vulnerability was found in GNU Binutils 2.44 and classified as problematic.
  from 0
• —CVE-2025-1182A vulnerability, which was classified as critical, was found in GNU Binutils 2.43.
  from 0
• —CVE-2025-1181A vulnerability classified as critical was found in GNU Binutils 2.43.
  from 0
• —CVE-2025-1180A vulnerability classified as problematic has been found in GNU Binutils 2.43.
  from 0
• —CVE-2025-1178A vulnerability was found in GNU Binutils 2.43.
  from 0
• —CVE-2025-1151A vulnerability was found in GNU Binutils 2.43.
  from 0
• —CVE-2014-8738The _bfd_slurp_extended_name_table function in bfd/archive.c in GNU binutils 2.24 and earlier allows remote attackers to cause a denial of…
  from 0, < 2.24.90.20141124-1
• —CVE-2014-8737Multiple directory traversal vulnerabilities in GNU binutils 2.24 and earlier allow local users to delete arbitrary files via a ..
  from 0, < 2.24.90.20141124-1
• —CVE-2014-8504Stack-based buffer overflow in the srec_scan function in bfd/srec.c in GNU binutils 2.24 and earlier allows remote attackers to cause a den…
  from 0, < 2.24.90.20141104-1
• —CVE-2014-8503Stack-based buffer overflow in the ihex_scan function in bfd/ihex.c in GNU binutils 2.24 and earlier allows remote attackers to cause a den…
  from 0, < 2.24.90.20141104-1
• —CVE-2014-8502Heap-based buffer overflow in the pe_print_edata function in bfd/peXXigen.c in GNU binutils 2.24 and earlier allows remote attackers to cau…
  from 0, < 2.24.90.20141104-1
• —CVE-2014-8501The _bfd_XXi_swap_aouthdr_in function in bfd/peXXigen.c in GNU binutils 2.24 and earlier allows remote attackers to cause a denial of servi…
  from 0, < 2.24.90.20141104-1
• —CVE-2014-8485The setup_group function in bfd/elf.c in libbfd in GNU binutils 2.24 and earlier allows remote attackers to cause a denial of service (cras…
  from 0, < 2.24.90.20141104-1
• —CVE-2014-8484binutils-mingw-w64 - security update
  from 0, < 2.22-8+deb7u2
• —CVE-2014-8484binutils-mingw-w64 - security update
  from 0, < 2.24.51.20140903-1
• —CVE-2014-8484binutils-mingw-w64 - security update
  from 0, < 2.20.1-16+deb6u1
• —CVE-2012-3509binutils - security update
  from 0, < 2.20.1-16+deb6u2
• —CVE-2012-3509binutils - security update
  from 0, < 2.22-8
• —CVE-2008-2310Format string vulnerability in c++filt in Apple Mac OS X 10.5 before 10.5.4 allows user-assisted attackers to execute arbitrary code or cau…
  from 0, < 2.18.1~cvs20080103-1
• —CVE-2005-4808Buffer overflow in reset_vars in config/tc-crx.c in the GNU as (gas) assembler in Free Software Foundation GNU Binutils before 20050714 all…
  from 0, < 2.17-1
• —CVE-2005-4807Stack-based buffer overflow in the as_bad function in messages.c in the GNU as (gas) assembler in Free Software Foundation GNU Binutils bef…
  from 0, < 2.17-1