objdump
by GNU
CVEs (8)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2024-53589 | Hig | 0.55 | 8.4 | 0.00 | Dec 5, 2024 | GNU objdump 2.43 is vulnerable to Buffer Overflow in the BFD (Binary File Descriptor) library's handling of tekhex format files. | ||
| CVE-2022-47696 | Hig | 0.51 | 7.8 | 0.00 | Aug 22, 2023 | An issue was discovered Binutils objdump before 2.39.3 allows attackers to cause a denial of service or other unspecified impacts via function compare_symbols. | ||
| CVE-2022-47695 | Hig | 0.51 | 7.8 | 0.00 | Aug 22, 2023 | An issue was discovered Binutils objdump before 2.39.3 allows attackers to cause a denial of service or other unspecified impacts via function bfd_mach_o_get_synthetic_symtab in match-o.c. | ||
| CVE-2021-46174 | Hig | 0.49 | 7.5 | 0.01 | Aug 22, 2023 | Heap-based Buffer Overflow in function bfd_getl32 in Binutils objdump 3.37. | ||
| CVE-2021-3549 | Hig | 0.46 | 7.1 | 0.01 | May 26, 2021 | An out of bounds flaw was found in GNU binutils objdump utility version 2.36. An attacker could use this flaw and pass a large section to avr_elf32_load_records_from_section() probably resulting in a crash or in some cases memory corruption. The highest threat from this… | ||
| CVE-2025-69646 | Med | 0.36 | 5.5 | 0.00 | Mar 6, 2026 | Binutils objdump contains a denial-of-service vulnerability when processing a crafted binary with malformed DWARF debug_rnglists data. A logic error in the handling of the debug_rnglists header can cause objdump to repeatedly print the same warning message and fail to terminate,… | ||
| CVE-2025-69645 | Med | 0.36 | 5.5 | 0.00 | Mar 6, 2026 | Binutils objdump contains a denial-of-service vulnerability when processing a crafted binary with malformed DWARF debug information. A logic error in the handling of DWARF compilation units can result in an invalid offset_size value being used inside byte_get_little_endian,… | ||
| CVE-2025-69644 | Med | 0.33 | 5.0 | 0.00 | Mar 6, 2026 | An issue was discovered in Binutils before 2.46. The objdump contains a denial-of-service vulnerability when processing a crafted binary with malformed debug information. A logic flaw in the handling of DWARF location list headers can cause objdump to enter an unbounded loop and… |
- risk 0.55cvss 8.4epss 0.00
GNU objdump 2.43 is vulnerable to Buffer Overflow in the BFD (Binary File Descriptor) library's handling of tekhex format files.
- risk 0.51cvss 7.8epss 0.00
An issue was discovered Binutils objdump before 2.39.3 allows attackers to cause a denial of service or other unspecified impacts via function compare_symbols.
- risk 0.51cvss 7.8epss 0.00
An issue was discovered Binutils objdump before 2.39.3 allows attackers to cause a denial of service or other unspecified impacts via function bfd_mach_o_get_synthetic_symtab in match-o.c.
- risk 0.49cvss 7.5epss 0.01
Heap-based Buffer Overflow in function bfd_getl32 in Binutils objdump 3.37.
- risk 0.46cvss 7.1epss 0.01
An out of bounds flaw was found in GNU binutils objdump utility version 2.36. An attacker could use this flaw and pass a large section to avr_elf32_load_records_from_section() probably resulting in a crash or in some cases memory corruption. The highest threat from this…
- risk 0.36cvss 5.5epss 0.00
Binutils objdump contains a denial-of-service vulnerability when processing a crafted binary with malformed DWARF debug_rnglists data. A logic error in the handling of the debug_rnglists header can cause objdump to repeatedly print the same warning message and fail to terminate,…
- risk 0.36cvss 5.5epss 0.00
Binutils objdump contains a denial-of-service vulnerability when processing a crafted binary with malformed DWARF debug information. A logic error in the handling of DWARF compilation units can result in an invalid offset_size value being used inside byte_get_little_endian,…
- risk 0.33cvss 5.0epss 0.00
An issue was discovered in Binutils before 2.46. The objdump contains a denial-of-service vulnerability when processing a crafted binary with malformed debug information. A logic flaw in the handling of DWARF location list headers can cause objdump to enter an unbounded loop and…