Medium severity5.5OSV Advisory· Published Feb 24, 2019· Updated Jun 17, 2026

CVE-2019-9076

Description

An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32. It is an attempted excessive memory allocation in elf_read_notes in elf.c.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

GNU/BinutilsOSV3 versions
binutils-2_32, gdb-4_18-branchpoint, gdb-7.10-branchpoint, …+ 2 more
- (no CPE)range: binutils-2_32, gdb-4_18-branchpoint, gdb-7.10-branchpoint, …
- cpe:2.3:a:gnu:binutils:2.32:*:*:*:*:*:*:*
- (no CPE)range: <=2.32
NetApp/Element Software Management
cpe:2.3:a:netapp:element_software_management:*:*:*:*:*:*:*:*
GNU/libbfdllm-fuzzy
Range: <=2.32

Patches

Vulnerability mechanics

References

security.netapp.com/advisory/ntap-20190314-0003/nvdPatchThird Party Advisory
sourceware.org/bugzilla/show_bug.cginvdExploitIssue TrackingThird Party Advisory
security.gentoo.org/glsa/202107-24nvdThird Party Advisory
support.f5.com/csp/article/K44650639nvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.358
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000