BI
Product
Binutils
by GNU · last CVE Sep 15, 2026
288
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 5High 112Medium 147Low 13
Watch

Add Binutils to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2017-8395
7.5
2%
May 1
The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, is vulnerable to an invalid write of size 8 because of missing a malloc() return-value…
Affected: 2.28
CVE-2017-8394
7.5
2%
May 1
The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, is vulnerable to an invalid read of size 4 due to NULL pointer dereferencing of…
Affected: 2.28
CVE-2017-8393
7.5
2%
May 1
The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, is vulnerable to a global buffer over-read error because of an assumption made by code…
Affected: 2.28
CVE-2017-8392
7.5
1%
May 1
The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, is vulnerable to an invalid read of size 8 because of missing a check to determine…
Affected: 2.28
CVE-2017-7304
7.5
2%
Mar 29
The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, is vulnerable to an invalid read (of size 8) because of missing a check (in the…
Affected: 2.28
CVE-2017-7303
7.5
2%
Mar 29
The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, is vulnerable to an invalid read (of size 4) because of missing a check (in the…
Affected: 2.28
CVE-2017-7302
7.5
2%
Mar 29
The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, has a swap_std_reloc_out function in bfd/aoutx.h that is vulnerable to an invalid read…
Affected: 2.28
CVE-2017-7301
7.5
2%
Mar 29
The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, has an aout_link_add_symbols function in bfd/aoutx.h that has an off-by-one…
Affected: 2.28
CVE-2017-7300
7.5
2%
Mar 29
The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, has an aout_link_add_symbols function in bfd/aoutx.h that is vulnerable to a heap-based…
Affected: 2.28
CVE-2017-7227
7.5
2%
Mar 22
GNU linker (ld) in GNU Binutils 2.28 is vulnerable to a heap-based buffer overflow while processing a bogus input script, leading to a program crash
Affected: 2.28
CVE-2017-7225
7.5
2%
Mar 22
The find_nearest_line function in addr2line in GNU Binutils 2.28 does not handle the case where the main file name and the directory name are both empty, triggering a NULL pointer…
Affected: 2.28
CVE-2017-7223
7.5
2%
Mar 22
GNU assembler in GNU Binutils 2.28 is vulnerable to a global buffer overflow (of size 1) while attempting to unget an EOF character from the input stream, potentially leading to a…
Affected: 2.28
CVE-2006-2362
7.3
14%
May 15
Buffer overflow in getsym in tekhex.c in libbfd in Free Software Foundation GNU Binutils before 20060423, as used by GNU strings, allows context-dependent attackers to cause a…
Affected: before 2.17
CVE-2026-3441
7.1
0%
Mar 15
Binutils: gnu binutils: information disclosure via specially crafted xcoff object file
Affected: All versions, or not specified
CVE-2026-3442
7.1
0%
Mar 15
Binutils: gnu binutils: information disclosure or denial of service via out-of-bounds read in bfd linker
Affected: All versions, or not specified
CVE-2023-25584
7.1
0%
Sep 14
An out-of-bounds read flaw was found in the parse_module function in bfd/vms-alpha.c in Binutils
Affected: before 2.40
CVE-2021-3549
7.1
1%
May 26
An out of bounds flaw was found in GNU binutils objdump utility version 2.36
Affected: 2.36
CVE-2026-90803
6.8
0%
Sep 14
GNU Binutils ld elf64-x86-64.c elf_x86_64_relocate_section buffer overflow
Affected: 2.47
CVE-2026-90828
6.6
0%
Sep 14
GNU Binutils ELF Orphan Section ldelf.c elf_orphan_compatible null pointer dereference
Affected: 2.47
CVE-2026-90801
6.6
0%
Sep 14
GNU Binutils ld cache.c cache_bwrite buffer overflow
Affected: 2.47
CVE-2021-32256
6.5
1%
Jul 18
An issue was discovered in GNU libiberty, as distributed in GNU Binutils 2.36
Affected: 2.36
CVE-2023-1972
6.5
1%
May 17
A potential heap based buffer overflow was found in _bfd_elf_slurp_version_tables() in bfd/elf.c
Affected: 2.35 through 2.40
CVE-2019-17451
6.5
2%
Oct 10
An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32
Affected: 2.32
CVE-2019-17450
6.5
3%
Oct 10
find_abstract_instance in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32, allows remote attackers to cause a denial of…
Affected: 2.32
CVE-2018-20712
6.5
3%
Jan 15
A heap-based buffer over-read exists in the function d_expression_1 in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31.1
Affected: 2.31.1
CVE-2018-17794
6.5
2%
Sep 30
An issue was discovered in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.31
Affected: 2.31
CVE-2018-10373
6.5
3%
Apr 25
concat_filename in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, allows remote attackers to cause a denial of service…
Affected: 2.30
CVE-2017-12967
6.5
3%
Aug 19
The getsym function in tekhex.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service…
Affected: 2.29
CVE-2021-20197
6.3
0%
Mar 26
There is an open race window when writing output in the following utilities in GNU binutils version 2.35 and earlier:ar, objcopy, strip, ranlib
Affected: through 2.35
CVE-2025-69647
6.2
0%
Mar 9
GNU Binutils thru 2.45.1 readelf contains a denial-of-service vulnerability when processing a crafted binary with malformed DWARF loclists data
Affected: through 2.45.1
CVE-2025-69648
6.2
0%
Mar 9
GNU Binutils thru 2.45.1 readelf contains a denial-of-service vulnerability when processing a crafted binary with malformed DWARF .debug_rnglists data
Affected: through 2.45.1
CVE-2025-69652
6.2
0%
Mar 6
GNU Binutils thru 2.46 readelf contains a vulnerability that leads to an abort (SIGABRT) when processing a crafted ELF binary with malformed DWARF abbrev or debug information
Affected: through 2.46
CVE-2026-90804
6.1
0%
Sep 14
GNU Binutils Eh Frame Section elf-eh-frame.c _bfd_elf_write_section_eh_frame buffer overflow
Affected: 2.47
CVE-2026-4647
6.1
0%
Mar 23
Binutils: out-of-bounds read in xcoff relocation processing in gnu binutils bfd library
Affected: All versions, or not specified
CVE-2020-35494
6.1
1%
Jan 4
There's a flaw in binutils /opcodes/tic4x-dis.c
Affected: before 2.34
CVE-2025-1153
5.9
1%
Feb 10
GNU Binutils format.c bfd_set_format memory corruption
Affected: 2.43; 2.44
CVE-2025-1178
5.6
1%
Feb 11
GNU Binutils ld libbfd.c bfd_putl64 memory corruption
Affected: 2.43
CVE-2026-6844
5.5
0%
Apr 22
Binutils: binutils: denial of service vulnerabilities in readelf via crafted elf files
Affected: All versions, or not specified
CVE-2025-69645
5.5
0%
Mar 6
Binutils objdump contains a denial-of-service vulnerability when processing a crafted binary with malformed DWARF debug information
Affected: 2.44
CVE-2025-69651
5.5
0%
Mar 6
GNU Binutils thru 2.46 readelf contains a vulnerability that leads to an invalid pointer free when processing a crafted ELF binary with malformed relocation or symbol data
Affected: through 2.46
CVE-2025-69646
5.5
0%
Mar 6
Binutils objdump contains a denial-of-service vulnerability when processing a crafted binary with malformed DWARF debug_rnglists data
Affected: 2.44
CVE-2025-11840
5.5
0%
Oct 16
GNU Binutils ldmisc.c vfinfo out-of-bounds
Affected: 2.45
CVE-2025-11839
5.5
0%
Oct 16
GNU Binutils prdbg.c tg_tag_type return value
Affected: 2.45
CVE-2025-11495
5.5
0%
Oct 8
GNU Binutils Linker elf64-x86-64.c elf_x86_64_relocate_section heap-based overflow
Affected: 2.45
CVE-2025-11494
5.5
0%
Oct 8
GNU Binutils Linker elfxx-x86.c _bfd_x86_elf_late_size_sections out-of-bounds
Affected: 2.45
CVE-2025-11414
5.5
0%
Oct 7
GNU Binutils Linker elflink.c get_link_hash_entry out-of-bounds
Affected: 2.45
CVE-2025-11413
5.5
0%
Oct 7
GNU Binutils Linker elflink.c elf_link_add_object_symbols out-of-bounds
Affected: 2.45
CVE-2025-11412
5.5
0%
Oct 7
GNU Binutils Linker elflink.c bfd_elf_gc_record_vtentry out-of-bounds
Affected: 2.45
CVE-2025-11081
5.5
0%
Sep 27
GNU Binutils objdump.c dump_dwarf_section out-of-bounds
Affected: 2.45
CVE-2025-8224
5.5
0%
Jul 27
GNU Binutils BFD Library elf.c bfd_elf_get_str_section null pointer dereference
Affected: 2.44
Page 3 of 6 · 288 total