← Back

Binutils

binutils

Vendor: Gnu • 276 CVEs

CVEs (276)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2014-9939
1Gnu
1Binutils
May 13, 2026
Mar 21, 2017
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
ihex.c in GNU Binutils before 2.26 contains a stack buffer overflow when printing bad bytes in Intel Hex objects.
CVE-2017-6969
1Gnu
1Binutils
May 13, 2026
Mar 17, 2017
N/A· v4
9.1 CRITICAL· v3
6.4 MEDIUM· v2
readelf in GNU Binutils 2.28 is vulnerable to a heap-based buffer over-read while processing corrupt RL78 binaries. The vulnerability can trigger program crashes. It may lead to an information leak as well.
CVE-2017-6966
1Gnu
1Binutils
May 13, 2026
Mar 17, 2017
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
readelf in GNU Binutils 2.28 has a use-after-free (specifically read-after-free) error while processing multiple, relocated sections in an MSP430 binary. This is caused by mishandling of an invalid symbol index, and mish...Show more
readelf in GNU Binutils 2.28 has a use-after-free (specifically read-after-free) error while processing multiple, relocated sections in an MSP430 binary. This is caused by mishandling of an invalid symbol index, and mishandling of state across invocations.Show less
CVE-2017-6965
1Gnu
1Binutils
May 13, 2026
Mar 17, 2017
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
readelf in GNU Binutils 2.28 writes to illegal addresses while processing corrupt input files containing symbol-difference relocations, leading to a heap-based buffer overflow.
CVE-2014-8738
4Canonical
DebianFedoraproject+1 more
4Binutils
Debian LinuxFedora+1 more
May 6, 2026
Jan 15, 2015
N/A· v4
N/A· v3
5.0 MEDIUM· v2
The _bfd_slurp_extended_name_table function in bfd/archive.c in GNU binutils 2.24 and earlier allows remote attackers to cause a denial of service (invalid write, segmentation fault, and crash) via a crafted extended nam...Show more
The _bfd_slurp_extended_name_table function in bfd/archive.c in GNU binutils 2.24 and earlier allows remote attackers to cause a denial of service (invalid write, segmentation fault, and crash) via a crafted extended name table in an archive.Show less
CVE-2014-8737
3Canonical
FedoraprojectGnu
3Binutils
FedoraUbuntu Linux
May 6, 2026
Dec 9, 2014
N/A· v4
N/A· v3
3.6 LOW· v2
Multiple directory traversal vulnerabilities in GNU binutils 2.24 and earlier allow local users to delete arbitrary files via a .. (dot dot) or full path name in an archive to (1) strip or (2) objcopy or create arbitrary...Show more
Multiple directory traversal vulnerabilities in GNU binutils 2.24 and earlier allow local users to delete arbitrary files via a .. (dot dot) or full path name in an archive to (1) strip or (2) objcopy or create arbitrary files via (3) a .. (dot dot) or full path name in an archive to ar.Show less
CVE-2014-8504
3Canonical
FedoraprojectGnu
3Binutils
FedoraUbuntu Linux
May 6, 2026
Dec 9, 2014
N/A· v4
N/A· v3
7.5 HIGH· v2
Stack-based buffer overflow in the srec_scan function in bfd/srec.c in GNU binutils 2.24 and earlier allows remote attackers to cause a denial of service (crash) and possibly have other unspecified impact via a crafted f...Show more
Stack-based buffer overflow in the srec_scan function in bfd/srec.c in GNU binutils 2.24 and earlier allows remote attackers to cause a denial of service (crash) and possibly have other unspecified impact via a crafted file.Show less
CVE-2014-8503
3Canonical
FedoraprojectGnu
3Binutils
FedoraUbuntu Linux
May 6, 2026
Dec 9, 2014
N/A· v4
N/A· v3
7.5 HIGH· v2
Stack-based buffer overflow in the ihex_scan function in bfd/ihex.c in GNU binutils 2.24 and earlier allows remote attackers to cause a denial of service (crash) and possibly have other unspecified impact via a crafted i...Show more
Stack-based buffer overflow in the ihex_scan function in bfd/ihex.c in GNU binutils 2.24 and earlier allows remote attackers to cause a denial of service (crash) and possibly have other unspecified impact via a crafted ihex file.Show less
CVE-2014-8502
3Canonical
FedoraprojectGnu
3Binutils
FedoraUbuntu Linux
May 6, 2026
Dec 9, 2014
N/A· v4
N/A· v3
7.5 HIGH· v2
Heap-based buffer overflow in the pe_print_edata function in bfd/peXXigen.c in GNU binutils 2.24 and earlier allows remote attackers to cause a denial of service (crash) and possibly have other unspecified impact via a t...Show more
Heap-based buffer overflow in the pe_print_edata function in bfd/peXXigen.c in GNU binutils 2.24 and earlier allows remote attackers to cause a denial of service (crash) and possibly have other unspecified impact via a truncated export table in a PE file.Show less
CVE-2014-8501
3Canonical
FedoraprojectGnu
3Binutils
FedoraUbuntu Linux
May 6, 2026
Dec 9, 2014
N/A· v4
N/A· v3
7.5 HIGH· v2
The _bfd_XXi_swap_aouthdr_in function in bfd/peXXigen.c in GNU binutils 2.24 and earlier allows remote attackers to cause a denial of service (out-of-bounds write) and possibly have other unspecified impact via a crafted...Show more
The _bfd_XXi_swap_aouthdr_in function in bfd/peXXigen.c in GNU binutils 2.24 and earlier allows remote attackers to cause a denial of service (out-of-bounds write) and possibly have other unspecified impact via a crafted NumberOfRvaAndSizes field in the AOUT header in a PE executable.Show less
CVE-2014-8485
3Canonical
FedoraprojectGnu
3Binutils
FedoraUbuntu Linux
May 6, 2026
Dec 9, 2014
N/A· v4
N/A· v3
7.5 HIGH· v2
The setup_group function in bfd/elf.c in libbfd in GNU binutils 2.24 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted section group headers in an EL...Show more
The setup_group function in bfd/elf.c in libbfd in GNU binutils 2.24 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted section group headers in an ELF file.Show less
CVE-2014-8484
3Canonical
FedoraprojectGnu
3Binutils
FedoraUbuntu Linux
May 6, 2026
Dec 9, 2014
N/A· v4
N/A· v3
5.0 MEDIUM· v2
The srec_scan function in bfd/srec.c in libdbfd in GNU binutils before 2.25 allows remote attackers to cause a denial of service (out-of-bounds read) via a small S-record.
CVE-2012-3509
3Canonical
DebianGnu
4Binutils
Debian LinuxLibiberty+1 more
Apr 29, 2026
Sep 5, 2012
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Multiple integer overflows in the (1) _objalloc_alloc function in objalloc.c and (2) objalloc_alloc macro in include/objalloc.h in GNU libiberty, as used by binutils 2.22, allow remote attackers to cause a denial of serv...Show more
Multiple integer overflows in the (1) _objalloc_alloc function in objalloc.c and (2) objalloc_alloc macro in include/objalloc.h in GNU libiberty, as used by binutils 2.22, allow remote attackers to cause a denial of service (crash) via vectors related to the "addition of CHUNK_HEADER_SIZE to the length," which triggers a heap-based buffer overflow.Show less
CVE-2006-2362
1Gnu
1Binutils
Apr 16, 2026
May 15, 2006
N/A· v4
7.3 HIGH· v3
7.5 HIGH· v2
Buffer overflow in getsym in tekhex.c in libbfd in Free Software Foundation GNU Binutils before 20060423, as used by GNU strings, allows context-dependent attackers to cause a denial of service (application crash) and po...Show more
Buffer overflow in getsym in tekhex.c in libbfd in Free Software Foundation GNU Binutils before 20060423, as used by GNU strings, allows context-dependent attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a file with a crafted Tektronix Hex Format (TekHex) record in which the length character is not a valid hexadecimal character.Show less
CVE-2005-4808
2Canonical
Gnu
2Binutils
Ubuntu Linux
Apr 16, 2026
Dec 31, 2005
N/A· v4
N/A· v3
7.6 HIGH· v2
Buffer overflow in reset_vars in config/tc-crx.c in the GNU as (gas) assembler in Free Software Foundation GNU Binutils before 20050714 allows user-assisted attackers to have an unknown impact via a crafted .s file.
CVE-2005-4807
2Canonical
Gnu
2Binutils
Ubuntu Linux
Apr 16, 2026
Dec 31, 2005
N/A· v4
N/A· v3
7.5 HIGH· v2
Stack-based buffer overflow in the as_bad function in messages.c in the GNU as (gas) assembler in Free Software Foundation GNU Binutils before 20050721 allows attackers to execute arbitrary code via a .c file with crafte...Show more
Stack-based buffer overflow in the as_bad function in messages.c in the GNU as (gas) assembler in Free Software Foundation GNU Binutils before 20050721 allows attackers to execute arbitrary code via a .c file with crafted inline assembly code.Show less