GNU Binutils 2.31.1

A heap-based buffer over-read exists in the function d_expression_1 in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31.1. A crafted input can cause segmentation faults, leading to denial-of-service, as demonstrated by c++filt.

Published: 2019-01-15T00:00:00.000Z
Updated: 2024-08-05T12:05:17.694Z

The demangle_template function in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.31.1, contains an integer overflow vulnerability (for "Create an array for saving the template argument values") that can trigger a heap-based buffer overflow, as demonstrated by nm.

Published: 2019-01-04T17:00:00.000Z
Updated: 2024-08-05T12:05:17.789Z

The demangle_template function in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.31.1, has a memory leak via a crafted string, leading to a denial of service (memory consumption), as demonstrated by cxxfilt, a related issue to CVE-2018-12698.

Published: 2019-01-02T14:00:00.000Z
Updated: 2024-08-05T12:05:17.725Z

A NULL pointer dereference was discovered in elf_link_add_object_symbols in elflink.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31.1. This occurs for a crafted ET_DYN with no program headers. A specially crafted ELF file allows remote attackers to cause a denial of service, as demonstrated by ld.

Published: 2019-01-01T16:00:00.000Z
Updated: 2024-08-05T12:05:17.829Z

In GNU Binutils 2.31.1, there is a use-after-free in the error function in elfcomm.c when called from the process_archive function in readelf.c via a crafted ELF file.

Published: 2018-12-31T19:00:00.000Z
Updated: 2025-05-06T18:03:56.837Z