← Back

Binutils

binutils

Vendor: Gnu • 288 CVEs

CVEs (288)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2014-8502
3Canonical
FedoraprojectGnu
3Binutils
FedoraUbuntu Linux
May 6, 2026
Dec 9, 2014
N/A· v4
N/A· v3
7.5 HIGH· v2
Heap-based buffer overflow in the pe_print_edata function in bfd/peXXigen.c in GNU binutils 2.24 and earlier allows remote attackers to cause a denial of service (crash) and possibly have other unspecified impact via a t...Show more
Heap-based buffer overflow in the pe_print_edata function in bfd/peXXigen.c in GNU binutils 2.24 and earlier allows remote attackers to cause a denial of service (crash) and possibly have other unspecified impact via a truncated export table in a PE file.Show less
CVE-2014-8501
3Canonical
FedoraprojectGnu
3Binutils
FedoraUbuntu Linux
May 6, 2026
Dec 9, 2014
N/A· v4
N/A· v3
7.5 HIGH· v2
The _bfd_XXi_swap_aouthdr_in function in bfd/peXXigen.c in GNU binutils 2.24 and earlier allows remote attackers to cause a denial of service (out-of-bounds write) and possibly have other unspecified impact via a crafted...Show more
The _bfd_XXi_swap_aouthdr_in function in bfd/peXXigen.c in GNU binutils 2.24 and earlier allows remote attackers to cause a denial of service (out-of-bounds write) and possibly have other unspecified impact via a crafted NumberOfRvaAndSizes field in the AOUT header in a PE executable.Show less
CVE-2014-8485
3Canonical
FedoraprojectGnu
3Binutils
FedoraUbuntu Linux
May 6, 2026
Dec 9, 2014
N/A· v4
N/A· v3
7.5 HIGH· v2
The setup_group function in bfd/elf.c in libbfd in GNU binutils 2.24 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted section group headers in an EL...Show more
The setup_group function in bfd/elf.c in libbfd in GNU binutils 2.24 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted section group headers in an ELF file.Show less
CVE-2014-8484
3Canonical
FedoraprojectGnu
3Binutils
FedoraUbuntu Linux
May 6, 2026
Dec 9, 2014
N/A· v4
N/A· v3
5.0 MEDIUM· v2
The srec_scan function in bfd/srec.c in libdbfd in GNU binutils before 2.25 allows remote attackers to cause a denial of service (out-of-bounds read) via a small S-record.
CVE-2012-3509
3Canonical
DebianGnu
4Binutils
Debian LinuxLibiberty+1 more
Apr 29, 2026
Sep 5, 2012
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Multiple integer overflows in the (1) _objalloc_alloc function in objalloc.c and (2) objalloc_alloc macro in include/objalloc.h in GNU libiberty, as used by binutils 2.22, allow remote attackers to cause a denial of serv...Show more
Multiple integer overflows in the (1) _objalloc_alloc function in objalloc.c and (2) objalloc_alloc macro in include/objalloc.h in GNU libiberty, as used by binutils 2.22, allow remote attackers to cause a denial of service (crash) via vectors related to the "addition of CHUNK_HEADER_SIZE to the length," which triggers a heap-based buffer overflow.Show less
CVE-2006-2362
1Gnu
1Binutils
Apr 16, 2026
May 15, 2006
N/A· v4
7.3 HIGH· v3
7.5 HIGH· v2
Buffer overflow in getsym in tekhex.c in libbfd in Free Software Foundation GNU Binutils before 20060423, as used by GNU strings, allows context-dependent attackers to cause a denial of service (application crash) and po...Show more
Buffer overflow in getsym in tekhex.c in libbfd in Free Software Foundation GNU Binutils before 20060423, as used by GNU strings, allows context-dependent attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a file with a crafted Tektronix Hex Format (TekHex) record in which the length character is not a valid hexadecimal character.Show less
CVE-2005-4808
2Canonical
Gnu
2Binutils
Ubuntu Linux
Apr 16, 2026
Dec 31, 2005
N/A· v4
N/A· v3
7.6 HIGH· v2
Buffer overflow in reset_vars in config/tc-crx.c in the GNU as (gas) assembler in Free Software Foundation GNU Binutils before 20050714 allows user-assisted attackers to have an unknown impact via a crafted .s file.
CVE-2005-4807
2Canonical
Gnu
2Binutils
Ubuntu Linux
Apr 16, 2026
Dec 31, 2005
N/A· v4
N/A· v3
7.5 HIGH· v2
Stack-based buffer overflow in the as_bad function in messages.c in the GNU as (gas) assembler in Free Software Foundation GNU Binutils before 20050721 allows attackers to execute arbitrary code via a .c file with crafte...Show more
Stack-based buffer overflow in the as_bad function in messages.c in the GNU as (gas) assembler in Free Software Foundation GNU Binutils before 20050721 allows attackers to execute arbitrary code via a .c file with crafted inline assembly code.Show less