Gnu Binutils
149 CVEs affecting Gnu Binutils. Latest disclosed: 2026-04-22. Critical: 4, High: 65.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2017-7614 | Critical | 9.8 | 2017-04-09 | elflink.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, has a "member access within null pointer" undefined be… |
CVE-2014-9939 | Critical | 9.8 | 2017-03-21 | ihex.c in GNU Binutils before 2.26 contains a stack buffer overflow when printing bad bytes in Intel Hex objects. |
CVE-2017-7226 | Critical | 9.1 | 2017-03-22 | The pe_ILF_object_p function in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, is vulnerable to a heap-based buffe… |
CVE-2017-6969 | Critical | 9.1 | 2017-03-17 | readelf in GNU Binutils 2.28 is vulnerable to a heap-based buffer over-read while processing corrupt RL78 binaries. The vulnerability can trigger program crash… |
CVE-2026-6846 | High | 7.8 | 2026-04-22 | A flaw was found in binutils. A heap-buffer-overflow vulnerability exists when processing a specially crafted XCOFF (Extended Common Object File Format) object… |
CVE-2017-17126 | High | 7.8 | 2017-12-04 | The load_debug_section function in readelf.c in GNU Binutils 2.29.1 allows remote attackers to cause a denial of service (invalid memory access and application… |
CVE-2017-17125 | High | 7.8 | 2017-12-04 | nm.c and objdump.c in GNU Binutils 2.29.1 mishandle certain global symbols, which allows remote attackers to cause a denial of service (_bfd_elf_get_symbol_ver… |
CVE-2017-17124 | High | 7.8 | 2017-12-04 | The _bfd_coff_read_string_table function in coffgen.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1, does not… |
CVE-2017-17122 | High | 7.8 | 2017-12-04 | The dump_relocs_in_section function in objdump.c in GNU Binutils 2.29.1 does not check for reloc count integer overflows, which allows remote attackers to caus… |
CVE-2017-17121 | High | 7.8 | 2017-12-04 | The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1, allows remote attackers to cause a denial of service (memory acce… |
CVE-2017-16832 | High | 7.8 | 2017-11-15 | The pe_bfd_read_buildid function in peicode.h in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1, does not validat… |
CVE-2017-16831 | High | 7.8 | 2017-11-15 | coffgen.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1, does not validate the symbol count, which allows rem… |
CVE-2017-16830 | High | 7.8 | 2017-11-15 | The print_gnu_property_note function in readelf.c in GNU Binutils 2.29.1 does not have integer-overflow protection on 32-bit platforms, which allows remote att… |
CVE-2017-16829 | High | 7.8 | 2017-11-15 | The _bfd_elf_parse_gnu_properties function in elf-properties.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1… |
CVE-2017-16828 | High | 7.8 | 2017-11-15 | The display_debug_frames function in dwarf.c in GNU Binutils 2.29.1 allows remote attackers to cause a denial of service (integer overflow and heap-based buffe… |
CVE-2017-16827 | High | 7.8 | 2017-11-15 | The aout_get_external_symbols function in aoutx.h in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1, allows remot… |
CVE-2017-16826 | High | 7.8 | 2017-11-15 | The coff_slurp_line_table function in coffcode.h in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1, allows remote… |
CVE-2017-15996 | High | 7.8 | 2017-10-29 | elfcomm.c in readelf in GNU Binutils 2.29 allows remote attackers to cause a denial of service (excessive memory allocation) or possibly have unspecified other… |
CVE-2017-15020 | High | 7.8 | 2017-10-05 | dwarf1.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, mishandles pointers, which allows remote attackers to c… |
CVE-2017-14745 | High | 7.8 | 2017-09-26 | The *_get_synthetic_symtab functions in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, interpret a -1 value as a s… |