High severity7.8NVD Advisory· Published Aug 4, 2017· Updated Jun 17, 2026

CVE-2017-12459

Description

The bfd_mach_o_read_symtab_strtab function in bfd/mach-o.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause an out of bounds heap write and possibly achieve code execution via a crafted mach-o file.

Affected products

GNU/Binutils2 versions
cpe:2.3:a:gnu:binutils:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:gnu:binutils:*:*:*:*:*:*:*:*range: <=2.29
- (no CPE)range: <=2.29
GNU/Binary File Descriptor (BFD) libraryllm-fuzzy
Range: <=2.29

Patches

Vulnerability mechanics

References

sourceware.org/bugzilla/show_bug.cginvdIssue TrackingPatchThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.507
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000