Medium severity5.5OSV Advisory· Published Feb 24, 2019· Updated Jun 17, 2026

CVE-2019-9073

Description

An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32. It is an attempted excessive memory allocation in _bfd_elf_slurp_version_tables in elf.c.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

GNU/BinutilsOSV3 versions
binutils-2_32, gdb-4_18-branchpoint, gdb-7.10-branchpoint, …+ 2 more
- (no CPE)range: binutils-2_32, gdb-4_18-branchpoint, gdb-7.10-branchpoint, …
- cpe:2.3:a:gnu:binutils:2.32:*:*:*:*:*:*:*
- (no CPE)range: <=2.32
NetApp/Hci Management Node
cpe:2.3:a:netapp:hci_management_node:-:*:*:*:*:*:*:*
NetApp/Solidfire
cpe:2.3:a:netapp:solidfire:-:*:*:*:*:*:*:*
Canonical/Ubuntu Linux
cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*
GNU/libbfdllm-fuzzy
Range: <=2.32

Patches

Vulnerability mechanics

References

security.netapp.com/advisory/ntap-20190314-0003/nvdPatchThird Party Advisory
sourceware.org/bugzilla/show_bug.cginvdExploitIssue TrackingThird Party Advisory
security.gentoo.org/glsa/202107-24nvdThird Party Advisory
support.f5.com/csp/article/K37121474nvdThird Party Advisory
usn.ubuntu.com/4336-1/nvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.358
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000