Binutils (Gnu) - vulnerabilities (CVEs)

288 CVEs, 0 in the last 30 days, 128 known versions, newest CVE from 2026-09-15. Vendor: Gnu.

CVEs of Binutils

CVE-2026-91782 - CVSS 4.8 (medium), 2026-09-15: A vulnerability was detected in GNU Binutils 2.47. Affected by this vulnerability is the function elf_x86_allocate_dynrelocs of the file bfd/elfxx-x86.c of…
CVE-2026-91781 - CVSS 4.8 (medium), 2026-09-15: A security vulnerability has been detected in GNU Binutils 2.47. Affected is the function elf_x86_64_common_section_index of the file bfd/elf64-x86-64.c of…
CVE-2026-91780 - CVSS 4.8 (medium), 2026-09-15: A weakness has been identified in GNU Binutils 2.47. This impacts the function elf_link_add_object_symbols of the file bfd/elflink.c. Executing a manipulation…
CVE-2026-91779 - CVSS 4.8 (medium), 2026-09-15: A security flaw has been discovered in GNU Binutils 2.47. This affects the function _bfd_elf_eh_frame_section_offset of the file bfd/elf-eh-frame.c of the…
CVE-2026-90831 - CVSS 5.3 (medium), 2026-09-14: A vulnerability was detected in GNU Binutils 2.47. The affected element is the function _bfd_elf_strtab_delref of the file bfd/elf-strtab.c of the component…
CVE-2026-90830 - CVSS 5.3 (medium), 2026-09-14: A security vulnerability has been detected in GNU Binutils 2.47. Impacted is the function _bfd_write_merged_section of the file bfd/merge.c of the component…
CVE-2026-90829 - CVSS 5.3 (medium), 2026-09-14: A weakness has been identified in GNU Binutils 2.47. This issue affects the function bfd_elf_set_group_contents of the file bfd/elf.c of the component…
CVE-2026-90828 - CVSS 6.6 (medium), 2026-09-14: A security flaw has been discovered in GNU Binutils 2.47. This vulnerability affects the function elf_orphan_compatible of the file ld/ldelf.c of the…
CVE-2026-90804 - CVSS 6.1 (medium), 2026-09-14: A vulnerability was detected in GNU Binutils 2.47. Affected by this issue is the function _bfd_elf_write_section_eh_frame of the file bfd/elf-eh-frame.c of…
CVE-2026-90803 - CVSS 6.8 (medium), 2026-09-14: A security vulnerability has been detected in GNU Binutils 2.47. Affected by this vulnerability is the function elf_x86_64_relocate_section of the file…
CVE-2026-90802 - CVSS 4.8 (medium), 2026-09-14: A weakness has been identified in GNU Binutils 2.47. Affected is the function bfd_putl64 of the file bfd/libbfd.c of the component ld. This manipulation…
CVE-2026-90801 - CVSS 6.6 (medium), 2026-09-14: A security flaw has been discovered in GNU Binutils 2.47. This impacts the function cache_bwrite of the file bfd/cache.c of the component ld. The manipulation…
CVE-2026-6845 - CVSS 5 (medium), 2026-04-22: A flaw was found in binutils, specifically within the `readelf` utility. This vulnerability allows a local attacker to cause a Denial of Service (DoS) by…
CVE-2026-6844 - CVSS 5.5 (medium), 2026-04-22: A flaw was found in the `readelf` utility of the binutils package. A local attacker could exploit two Denial of Service (DoS) vulnerabilities by providing a…
CVE-2026-6846 - CVSS 7.8 (high), 2026-04-22: A flaw was found in binutils. A heap-buffer-overflow vulnerability exists when processing a specially crafted XCOFF (Extended Common Object File Format)…
CVE-2026-4647 - CVSS 6.1 (medium), 2026-03-23: A flaw was found in the GNU Binutils BFD library, a widely used component for handling binary files such as object files and executables. The issue occurs…
CVE-2026-3442 - CVSS 7.1 (high), 2026-03-16: A flaw was found in GNU Binutils. This vulnerability, a heap-based buffer overflow, specifically an out-of-bounds read, exists in the bfd linker component. An…
CVE-2026-3441 - CVSS 7.1 (high), 2026-03-16: A flaw was found in GNU Binutils. This heap-based buffer overflow vulnerability, specifically an out-of-bounds read in the bfd linker, allows an attacker to…
CVE-2025-69648 - CVSS 6.2 (medium), 2026-03-09: GNU Binutils thru 2.45.1 readelf contains a denial-of-service vulnerability when processing a crafted binary with malformed DWARF .debug_rnglists data. A…
CVE-2025-69647 - CVSS 6.2 (medium), 2026-03-09: GNU Binutils thru 2.45.1 readelf contains a denial-of-service vulnerability when processing a crafted binary with malformed DWARF loclists data. A logic flaw…
CVE-2025-69649 - CVSS 7.5 (high), 2026-03-06: GNU Binutils thru 2.46 readelf contains a null pointer dereference vulnerability when processing a crafted ELF binary with malformed header fields. During…
CVE-2025-69652 - CVSS 6.2 (medium), 2026-03-06: GNU Binutils thru 2.46 readelf contains a vulnerability that leads to an abort (SIGABRT) when processing a crafted ELF binary with malformed DWARF abbrev or…
CVE-2025-69650 - CVSS 7.5 (high), 2026-03-06: GNU Binutils thru 2.46 readelf contains a double free vulnerability when processing a crafted ELF binary with malformed relocation data. During GOT relocation…
CVE-2025-69644 - CVSS 5 (medium), 2026-03-06: An issue was discovered in Binutils before 2.46. The objdump contains a denial-of-service vulnerability when processing a crafted binary with malformed debug…
CVE-2025-69651 - CVSS 5.5 (medium), 2026-03-06: GNU Binutils thru 2.46 readelf contains a vulnerability that leads to an invalid pointer free when processing a crafted ELF binary with malformed relocation…
CVE-2025-69646 - CVSS 5.5 (medium), 2026-03-06: Binutils objdump contains a denial-of-service vulnerability when processing a crafted binary with malformed DWARF debug_rnglists data. A logic error in the…
CVE-2025-69645 - CVSS 5.5 (medium), 2026-03-06: Binutils objdump contains a denial-of-service vulnerability when processing a crafted binary with malformed DWARF debug information. A logic error in the…
CVE-2025-66864 - CVSS 7.5 (high), 2025-12-29: An issue was discovered in function d_print_comp_inner in file cp-demangle.c in BinUtils 2.26 allows attackers to cause a denial of service via crafted PE file.
CVE-2025-66863 - CVSS 7.5 (high), 2025-12-29: An issue was discovered in function d_discriminator in file cp-demangle.c in BinUtils 2.26 allows attackers to cause a denial of service via crafted PE file.
CVE-2025-66866 - CVSS 7.5 (high), 2025-12-29: An issue was discovered in function d_abi_tags in file cp-demangle.c in BinUtils 2.26 allows attackers to cause a denial of service via crafted PE file.
CVE-2025-66862 - CVSS 7.5 (high), 2025-12-29: A buffer overflow vulnerability in function gnu_special in file cplus-dem.c in BinUtils 2.26 allows attackers to cause a denial of service via crafted PE file.
CVE-2025-66865 - CVSS 7.5 (high), 2025-12-29: An issue was discovered in function d_print_comp_inner in file cp-demangle.c in BinUtils 2.26 allows attackers to cause a denial of service via crafted PE file.
CVE-2025-66861 - CVSS 2.5 (low), 2025-12-29: An issue was discovered in function d_unqualified_name in file cp-demangle.c in BinUtils 2.26 allowing attackers to cause a denial of service via crafted PE…
CVE-2025-11840 - CVSS 5.5 (medium), 2025-10-16: A weakness has been identified in GNU Binutils 2.45. The affected element is the function vfinfo of the file ldmisc.c. Executing a manipulation can lead to…
CVE-2025-11839 - CVSS 5.5 (medium), 2025-10-16: A security flaw has been discovered in GNU Binutils 2.45. Impacted is the function tg_tag_type of the file prdbg.c. Performing a manipulation results in…
CVE-2025-11495 - CVSS 5.5 (medium), 2025-10-08: A vulnerability was determined in GNU Binutils 2.45. The affected element is the function elf_x86_64_relocate_section of the file elf64-x86-64.c of the…
CVE-2025-11494 - CVSS 5.5 (medium), 2025-10-08: A vulnerability was found in GNU Binutils 2.45. Impacted is the function _bfd_x86_elf_late_size_sections of the file bfd/elfxx-x86.c of the component Linker.…
CVE-2025-11414 - CVSS 5.5 (medium), 2025-10-07: A vulnerability was determined in GNU Binutils 2.45. Affected by this vulnerability is the function get_link_hash_entry of the file bfd/elflink.c of the…
CVE-2025-11413 - CVSS 5.5 (medium), 2025-10-07: A vulnerability was found in GNU Binutils 2.45. Affected is the function elf_link_add_object_symbols of the file bfd/elflink.c of the component Linker. The…
CVE-2025-11412 - CVSS 5.5 (medium), 2025-10-07: A vulnerability has been found in GNU Binutils 2.45. This impacts the function bfd_elf_gc_record_vtentry of the file bfd/elflink.c of the component Linker.…
CVE-2025-11083 - CVSS 7.8 (high), 2025-09-27: A vulnerability has been found in GNU Binutils 2.45. The affected element is the function elf_swap_shdr in the library bfd/elfcode.h of the component Linker.…
CVE-2025-11082 - CVSS 7.8 (high), 2025-09-27: A flaw has been found in GNU Binutils 2.45. Impacted is the function _bfd_elf_parse_eh_frame of the file bfd/elf-eh-frame.c of the component Linker. Executing…
CVE-2025-11081 - CVSS 5.5 (medium), 2025-09-27: A vulnerability was detected in GNU Binutils 2.45. This issue affects the function dump_dwarf_section of the file binutils/objdump.c. Performing manipulation…
CVE-2025-8225 - CVSS 4.8 (medium), 2025-07-27: A vulnerability was found in GNU Binutils 2.44 and classified as problematic. This issue affects the function process_debug_info of the file binutils/dwarf.c…
CVE-2025-8224 - CVSS 5.5 (medium), 2025-07-27: A vulnerability has been found in GNU Binutils 2.44 and classified as problematic. This vulnerability affects the function bfd_elf_get_str_section of the file…
CVE-2025-7546 - CVSS 7.8 (high), 2025-07-13: A vulnerability, which was classified as problematic, has been found in GNU Binutils 2.45. Affected by this issue is the function bfd_elf_set_group_contents…
CVE-2025-7545 - CVSS 7.8 (high), 2025-07-13: A vulnerability classified as problematic was found in GNU Binutils 2.45. Affected by this vulnerability is the function copy_section of the file…
CVE-2025-5245 - CVSS 7.8 (high), 2025-05-27: A vulnerability classified as critical has been found in GNU Binutils up to 2.44. This affects the function debug_type_samep of the file /binutils/debug.c of…
CVE-2025-5244 - CVSS 7.8 (high), 2025-05-27: A vulnerability was found in GNU Binutils up to 2.44. It has been rated as critical. Affected by this issue is the function elf_gc_sweep of the file…
CVE-2025-3198 - CVSS 5.5 (medium), 2025-04-04: A vulnerability has been found in GNU Binutils 2.43/2.44 and classified as problematic. Affected by this vulnerability is the function display_info of the…
CVE-2025-1182 - CVSS 5 (medium), 2025-02-11: A vulnerability, which was classified as critical, was found in GNU Binutils 2.43. Affected is the function bfd_elf_reloc_symbol_deleted_p of the file…
CVE-2025-1181 - CVSS 5 (medium), 2025-02-11: A vulnerability classified as critical was found in GNU Binutils 2.43. This vulnerability affects the function _bfd_elf_gc_mark_rsec of the file bfd/elflink.c…
CVE-2025-1180 - CVSS 3.1 (low), 2025-02-11: A vulnerability classified as problematic has been found in GNU Binutils 2.43. This affects the function _bfd_elf_write_section_eh_frame of the file…
CVE-2025-1179 - CVSS 7.5 (high), 2025-02-11: A vulnerability was found in GNU Binutils 2.43. It has been rated as critical. Affected by this issue is the function bfd_putl64 of the file bfd/libbfd.c of…
CVE-2025-1178 - CVSS 6.3 (medium), 2025-02-11: A vulnerability was found in GNU Binutils 2.43. It has been declared as problematic. Affected by this vulnerability is the function bfd_putl64 of the file…
CVE-2025-1176 - CVSS 5 (medium), 2025-02-11: A vulnerability was found in GNU Binutils 2.43 and classified as critical. This issue affects the function _bfd_elf_gc_mark_rsec of the file elflink.c of the…
CVE-2025-1153 - CVSS 5.9 (medium), 2025-02-10: A vulnerability classified as problematic was found in GNU Binutils 2.43/2.44. Affected by this vulnerability is the function bfd_set_format of the file…
CVE-2025-1152 - CVSS 3.7 (low), 2025-02-10: A vulnerability classified as problematic has been found in GNU Binutils 2.43. Affected is the function xstrdup of the file xstrdup.c of the component ld. The…
CVE-2025-1151 - CVSS 3.1 (low), 2025-02-10: A vulnerability was found in GNU Binutils 2.43. It has been rated as problematic. This issue affects the function xmemdup of the file xmemdup.c of the…
CVE-2025-1150 - CVSS 3.1 (low), 2025-02-10: A vulnerability was found in GNU Binutils 2.43. It has been declared as problematic. This vulnerability affects the function bfd_malloc of the file libbfd.c…
CVE-2025-1149 - CVSS 3.1 (low), 2025-02-10: A vulnerability was found in GNU Binutils 2.43. It has been classified as problematic. This affects the function xstrdup of the file libiberty/xmalloc.c of…
CVE-2025-1148 - CVSS 3.1 (low), 2025-02-10: A vulnerability was found in GNU Binutils 2.43 and classified as problematic. Affected by this issue is the function link_order_scan of the file ld/ldelfgen.c…
CVE-2025-1147 - CVSS 5.3 (medium), 2025-02-10: A vulnerability has been found in GNU Binutils 2.43 and classified as problematic. Affected by this vulnerability is the function __sanitizer::internal_strlen…
CVE-2025-0840 - CVSS 7.5 (high), 2025-01-29: A vulnerability, which was classified as problematic, was found in GNU Binutils up to 2.43. This affects the function disassemble_bytes of the file…
CVE-2023-25585 - CVSS 5.5 (medium), 2023-09-14: A flaw was found in Binutils. The use of an uninitialized field in the struct module *module may lead to application crash and local denial of service.
CVE-2023-25584 - CVSS 7.1 (high), 2023-09-14: An out-of-bounds read flaw was found in the parse_module function in bfd/vms-alpha.c in Binutils.
CVE-2023-25588 - CVSS 5.5 (medium), 2023-09-14: A flaw was found in Binutils. The field `the_bfd` of `asymbol`struct is uninitialized in the `bfd_mach_o_get_synthetic_symtab` function, which may lead to an…
CVE-2023-25586 - CVSS 5.5 (medium), 2023-09-14: A flaw was found in Binutils. A logic fail in the bfd_init_section_decompress_status function may lead to the use of an uninitialized variable that can cause…
CVE-2022-48065 - CVSS 5.5 (medium), 2023-08-22: GNU Binutils before 2.40 was discovered to contain a memory leak vulnerability var the function find_abstract_instance in dwarf2.c.
CVE-2022-45703 - CVSS 7.8 (high), 2023-08-22: Heap buffer overflow vulnerability in binutils readelf before 2.40 via function display_debug_section in file readelf.c.
CVE-2022-47010 - CVSS 5.5 (medium), 2023-08-22: An issue was discovered function pr_function_type in prdbg.c in Binutils 2.34 thru 2.38, allows attackers to cause a denial of service due to memory leaks.
CVE-2022-47695 - CVSS 7.8 (high), 2023-08-22: An issue was discovered Binutils objdump before 2.39.3 allows attackers to cause a denial of service or other unspecified impacts via function…
CVE-2022-48064 - CVSS 5.5 (medium), 2023-08-22: GNU Binutils before 2.40 was discovered to contain an excessive memory consumption vulnerability via the function bfd_dwarf2_find_nearest_line_with_alt at…
CVE-2022-44840 - CVSS 7.8 (high), 2023-08-22: Heap buffer overflow vulnerability in binutils readelf before 2.40 via function find_section_in_set in file readelf.c.
CVE-2022-47008 - CVSS 5.5 (medium), 2023-08-22: An issue was discovered function make_tempdir, and make_tempname in bucomm.c in Binutils 2.34 thru 2.38, allows attackers to cause a denial of service due to…
CVE-2022-47673 - CVSS 7.8 (high), 2023-08-22: An issue was discovered in Binutils addr2line before 2.39.3, function parse_module contains multiple out of bound reads which may cause a denial of service or…
CVE-2022-48063 - CVSS 5.5 (medium), 2023-08-22: GNU Binutils before 2.40 was discovered to contain an excessive memory consumption vulnerability via the function load_separate_debug_files at dwarf2.c. The…
CVE-2022-47007 - CVSS 5.5 (medium), 2023-08-22: An issue was discovered function stab_demangle_v3_arg in stabs.c in Binutils 2.34 thru 2.38, allows attackers to cause a denial of service due to memory leaks.
CVE-2022-47011 - CVSS 5.5 (medium), 2023-08-22: An issue was discovered function parse_stab_struct_fields in stabs.c in Binutils 2.34 thru 2.38, allows attackers to cause a denial of service due to memory…
CVE-2022-47696 - CVSS 7.8 (high), 2023-08-22: An issue was discovered Binutils objdump before 2.39.3 allows attackers to cause a denial of service or other unspecified impacts via function compare_symbols.
CVE-2022-35206 - CVSS 5.5 (medium), 2023-08-22: Null pointer dereference vulnerability in Binutils readelf 2.38.50 via function read_and_display_attr_value in file dwarf.c.
CVE-2022-35205 - CVSS 5.5 (medium), 2023-08-22: An issue was discovered in Binutils readelf 2.38.50, reachable assertion failure in function display_debug_names allows attackers to cause a denial of service.
CVE-2021-46174 - CVSS 7.5 (high), 2023-08-22: Heap-based Buffer Overflow in function bfd_getl32 in Binutils objdump 3.37.
CVE-2020-35342 - CVSS 7.5 (high), 2023-08-22: GNU Binutils before 2.34 has an uninitialized-heap vulnerability in function tic4x_print_cond (file opcodes/tic4x-dis.c) which could allow attackers to make…
CVE-2020-21490 - CVSS 5.5 (medium), 2023-08-22: An issue was discovered in GNU Binutils 2.34. It is a memory leak when process microblaze-dis.c. This one will consume memory on each insn disassembled.
CVE-2020-19726 - CVSS 8.8 (high), 2023-08-22: An issue was discovered in binutils libbfd.c 2.36 relating to the auxiliary symbol data allows attackers to read or write to system memory or cause a denial…
CVE-2020-19724 - CVSS 5.5 (medium), 2023-08-22: A memory consumption issue in get_data function in binutils/nm.c in GNU nm before 2.34 allows attackers to cause a denial of service via crafted command.
CVE-2021-32256 - CVSS 6.5 (medium), 2023-07-18: An issue was discovered in GNU libiberty, as distributed in GNU Binutils 2.36. It is a stack-overflow issue in demangle_type in rust-demangle.c.
CVE-2023-1972 - CVSS 6.5 (medium), 2023-05-17: A potential heap based buffer overflow was found in _bfd_elf_slurp_version_tables() in bfd/elf.c. This may lead to loss of availability.
CVE-2023-1579 - CVSS 7.8 (high), 2023-04-03: Heap based buffer overflow in binutils-gdb/bfd/libbfd.c in bfd_getl64.
CVE-2022-4285 - CVSS 5.5 (medium), 2023-01-27: An illegal memory access flaw was found in the binutils package. Parsing an ELF file containing corrupt symbol version information may result in a denial of…
CVE-2022-38533 - CVSS 5.5 (medium), 2022-08-26: In GNU Binutils before 2.40, there is a heap-buffer-overflow in the error function bfd_getl32 when called from the strip_main function in strip-new via a…
CVE-2021-45078 - CVSS 7.8 (high), 2021-12-15: stab_xcoff_builtin_type in stabs.c in GNU Binutils through 2.37 allows attackers to cause a denial of service (heap-based buffer overflow) or possibly have…
CVE-2021-37322 - CVSS 7.8 (high), 2021-11-18: GCC c++filt v2.26 was discovered to contain a use-after-free vulnerability via the component cplus-dem.c.
CVE-2021-3530 - CVSS 7.5 (high), 2021-06-02: A flaw was discovered in GNU libiberty within demangle_path() in rust-demangle.c, as distributed in GNU Binutils version 2.36. A crafted symbol can cause…
CVE-2021-3549 - CVSS 7.1 (high), 2021-05-26: An out of bounds flaw was found in GNU binutils objdump utility version 2.36. An attacker could use this flaw and pass a large section to…
CVE-2021-20294 - CVSS 7.8 (high), 2021-04-29: A flaw was found in binutils readelf 2.35 program. An attacker who is able to convince a victim using readelf to read a crafted file could trigger a stack…
CVE-2021-20284 - CVSS 5.5 (medium), 2021-03-26: A flaw was found in GNU Binutils 2.35.1, where there is a heap-based buffer overflow in _bfd_elf_slurp_secondary_reloc_section in elf.c due to the number of…
CVE-2021-20197 - CVSS 6.3 (medium), 2021-03-26: There is an open race window when writing output in the following utilities in GNU binutils version 2.35 and earlier:ar, objcopy, strip, ranlib. When these…
CVE-2020-35507 - CVSS 5.5 (medium), 2021-01-04: There's a flaw in bfd_pef_parse_function_stubs of bfd/pef.c in binutils in versions prior to 2.34 which could allow an attacker who is able to submit a…