GCVE - cpe:2.3:a:gnu:binutils:2.36:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:gnu:binutils:2.36:*:*:*:*:*:*:*

part: a version: 2.36 update: *

Vendor	Gnu (`575dd98a-a14a-5d9e-a2eb-97d38d86fcb9`)
Product	Binutils (`bdfd61c2-da72-5ce9-819e-45ee45378259`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:deb/debian/binutils`	purl2cpe	2026-06-01 10:11:54.199135
`pkg:deb/ubuntu/binutils`	purl2cpe	2026-06-01 10:11:54.199136
`pkg:github/bminor/binutils-gdb`	purl2cpe	2026-06-01 10:11:54.199137
`pkg:redox-os/redox-os/binutils-gdb`	purl2cpe	2026-06-01 10:11:54.199139
`pkg:rpm/fedora/binutils`	purl2cpe	2026-06-01 10:11:54.199140
`pkg:rpm/opensuse/binutils`	purl2cpe	2026-06-01 10:11:54.199141
`pkg:sourceware/binutils-gdb`	purl2cpe	2026-06-01 10:11:54.199143

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2021-3549`	vulnerable	2026-06-08 05:33:52.760350	Details available An out of bounds flaw was found in GNU binutils objdump utility version 2.36. An attacker could use this flaw and pass a large section to avr_elf32_load_records_from_section() probably resulting in a crash or in some cases memory corruption. The highest threat from this vulnerability is to integrity as well as system availability. Published: 2021-05-26T20:41:11.000Z Updated: 2025-02-28T13:07:22.670Z Open on db.gcve.eu Reference links https://bugzilla.redhat.com/show_bug.cgi?id=1960717 https://security.gentoo.org/glsa/202208-30	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-3530`	vulnerable	2026-06-08 05:33:52.721680	Details available A flaw was discovered in GNU libiberty within demangle_path() in rust-demangle.c, as distributed in GNU Binutils version 2.36. A crafted symbol can cause stack memory to be exhausted leading to a crash. Published: 2021-06-02T14:31:23.000Z Updated: 2024-08-03T17:01:05.995Z Open on db.gcve.eu Reference links https://bugzilla.redhat.com/show_bug.cgi?id=1956423 https://src.fedoraproject.org/rpms/binutils/blob/rawhide/f/binutils-CVE-2021-3530.patch https://security.netapp.com/advisory/ntap-20210716-0006/ https://security.gentoo.org/glsa/202208-30	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-32256`	vulnerable	2026-06-08 05:31:54.728256	Details available An issue was discovered in GNU libiberty, as distributed in GNU Binutils 2.36. It is a stack-overflow issue in demangle_type in rust-demangle.c. Published: 2023-07-18T00:00:00.000Z Updated: 2024-10-28T18:24:34.000Z Open on db.gcve.eu Reference links https://bugs.launchpad.net/ubuntu/+source/binutils/+bug/1927070 https://security.netapp.com/advisory/ntap-20230824-0013/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-19726`	vulnerable	2026-06-08 05:20:57.421666	Details available An issue was discovered in binutils libbfd.c 2.36 relating to the auxiliary symbol data allows attackers to read or write to system memory or cause a denial of service. Published: 2023-08-22T00:00:00.000Z Updated: 2024-10-04T16:24:21.173Z Open on db.gcve.eu Reference links https://sourceware.org/bugzilla/show_bug.cgi?id=26240 https://sourceware.org/bugzilla/show_bug.cgi?id=26241	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.