Skip to content

GNU · product

Binutils

278 CVEs

Every dot is a CVE in what this vendor ships; the named ones are the most at risk.

likely to be exploited
1

Every one of the 278 is a mark on the map. Named now: 1 to 26, most at risk first.

  1. Buffer overflow in getsym in tekhex.c in libbfd in Free Software Foundation GNU Binutils before 20060423, as used by GNU strings, allows context-dependent attackers to cause a den…CVE-2006-2362Gnu · CVSS 7.3 · 14% likely

    CWE-787

  2. The *regs* macros in opcodes/bfin-dis.c in GNU Binutils 2.28 allow remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecifi…CVE-2017-9749Gnu · 8.5% likely

    CWE-119

  3. The disassemble_bytes function in objdump.c in GNU Binutils 2.28 allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unsp…CVE-2017-9746Gnu · 8.5% likely

    CWE-119

  4. The aarch64_ext_ldst_reglist function in opcodes/aarch64-dis.c in GNU Binutils 2.28 allows remote attackers to cause a denial of service (buffer overflow and application crash) or…CVE-2017-9756Gnu · 8.1% likely

    CWE-119

  5. opcodes/rx-decode.opc in GNU Binutils 2.28 lacks bounds checks for certain scale arrays, which allows remote attackers to cause a denial of service (buffer overflow and applicatio…CVE-2017-9750Gnu · 8.1% likely

    CWE-119

  6. The score_opcodes function in opcodes/score7-dis.c in GNU Binutils 2.28 allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly ha…CVE-2017-9742Gnu · 8.1% likely

    CWE-119

  7. The ieee_object_p function in bfd/ieee.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, might allow remote attackers to cause a den…CVE-2017-9748Gnu · 7.9% likely

    CWE-119

  8. The ieee_archive_p function in bfd/ieee.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, might allow remote attackers to cause a de…CVE-2017-9747Gnu · 7.9% likely

    CWE-119

  9. The setup_group function in bfd/elf.c in libbfd in GNU binutils 2.24 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code v…CVE-2014-8485Gnu · 7.5% likely

    CWE-94

  10. demangle_template in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30, allows attackers to trigger excessive memory consumption (aka OOM) during the "Create an ar…CVE-2018-12698Gnu · 6.2% likely
  11. Stack-based buffer overflow in the srec_scan function in bfd/srec.c in GNU binutils 2.24 and earlier allows remote attackers to cause a denial of service (crash) and possibly have…CVE-2014-8504Gnu · 6.2% likely

    CWE-119

  12. Stack-based buffer overflow in the ihex_scan function in bfd/ihex.c in GNU binutils 2.24 and earlier allows remote attackers to cause a denial of service (crash) and possibly have…CVE-2014-8503Gnu · 6.2% likely

    CWE-119

  13. decode_line_info in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, mishandles a length calculation, which allows remote at…CVE-2017-14939Gnu · 5.9% likely

    CWE-125

  14. The elf_object_p function in elfcode.h in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1, has an unsigned integer overflow because bf…CVE-2018-6323Gnu · 5.8% likely

    CWE-190

  15. The _bfd_slurp_extended_name_table function in bfd/archive.c in GNU binutils 2.24 and earlier allows remote attackers to cause a denial of service (invalid write, segmentation fau…CVE-2014-8738Gnu · 5.2% likely

    CWE-119

  16. The _bfd_XXi_swap_aouthdr_in function in bfd/peXXigen.c in GNU binutils 2.24 and earlier allows remote attackers to cause a denial of service (out-of-bounds write) and possibly ha…CVE-2014-8501Gnu · 5.2% likely

    CWE-119

  17. The srec_scan function in bfd/srec.c in libdbfd in GNU binutils before 2.25 allows remote attackers to cause a denial of service (out-of-bounds read) via a small S-record.CVE-2014-8484Gnu · 5.1% likely

    CWE-119

  18. Heap-based buffer overflow in the pe_print_edata function in bfd/peXXigen.c in GNU binutils 2.24 and earlier allows remote attackers to cause a denial of service (crash) and possi…CVE-2014-8502Gnu · 4.9% likely

    CWE-119

  19. A NULL pointer dereference (aka SEGV on unknown address 0x000000000000) was discovered in work_stuff_copy_to_from in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2…CVE-2018-12697Gnu · 4.8% likely

    CWE-476

  20. dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, miscalculates DW_FORM_ref_addr die refs in the case of a relocatable object…CVE-2017-15938Gnu · 4.6% likely

    CWE-119

  21. finish_stab in stabs.c in GNU Binutils 2.30 allows attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact, as demonstrated b…CVE-2018-12699Gnu · 4.5% likely

    CWE-787

  22. The demangle_template function in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.31.1, has a memory leak via a crafted string, leading to a denial of service (memo…CVE-2018-20657Gnu · 4.0% likely

    CWE-772

  23. readelf in GNU Binutils 2.28 is vulnerable to a heap-based buffer over-read while processing corrupt RL78 binaries. The vulnerability can trigger program crashes. It may lead to a…CVE-2017-6969Gnu · 3.8% likely

    CWE-125

  24. Multiple integer overflows in the (1) _objalloc_alloc function in objalloc.c and (2) objalloc_alloc macro in include/objalloc.h in GNU libiberty, as used by binutils 2.22, allow r…CVE-2012-3509Gnu · 3.7% likely

    CWE-189

  25. elflink.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, has a "member access within null pointer" undefined behavior issue, which…CVE-2017-7614Gnu · 3.7% likely

    CWE-476

  26. The elf_read_notesfunction in bfd/elf.c in GNU Binutils 2.29 allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecif…CVE-2017-12799Gnu · 3.3% likely

    CWE-119

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data. Use this via MCP

Updated AboutDevelopersSign in