Approved changes feed: RSS · Atom

cpe:2.3:a:gnu:binutils:2.40:*:*:*:*:*:*:*

part: a version: 2.40 update: *

VendorGnu (575dd98a-a14a-5d9e-a2eb-97d38d86fcb9)
ProductBinutils (bdfd61c2-da72-5ce9-819e-45ee45378259)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/binutils purl2cpe 2026-06-01 10:11:54.199195
pkg:deb/ubuntu/binutils purl2cpe 2026-06-01 10:11:54.199197
pkg:github/bminor/binutils-gdb purl2cpe 2026-06-01 10:11:54.199198
pkg:redox-os/redox-os/binutils-gdb purl2cpe 2026-06-01 10:11:54.199199
pkg:rpm/fedora/binutils purl2cpe 2026-06-01 10:11:54.199201
pkg:rpm/opensuse/binutils purl2cpe 2026-06-01 10:11:54.199202
pkg:sourceware/binutils-gdb purl2cpe 2026-06-01 10:11:54.199203

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-25588 vulnerable 2026-06-08 05:56:09.305089 Field `the_bfd` of `asymbol` is uninitialized in function `bfd_mach_o_get_synthetic_symtab`
MEDIUM (4.7)
A flaw was found in Binutils. The field `the_bfd` of `asymbol`struct is uninitialized in the `bfd_mach_o_get_synthetic_symtab` function, which may lead to an application crash and local denial of service.
Published: 2023-09-14T20:47:16.974Z
Updated: 2025-02-13T16:44:33.622Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-25586 vulnerable 2026-06-08 05:56:09.304167 Local variable `ch_type` in function `bfd_init_section_decompress_status` can be uninitialized
MEDIUM (4.7)
A flaw was found in Binutils. A logic fail in the bfd_init_section_decompress_status function may lead to the use of an uninitialized variable that can cause a crash and local denial of service.
Published: 2023-09-14T20:49:15.468Z
Updated: 2025-02-13T16:44:33.064Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-25585 vulnerable 2026-06-08 05:56:09.303175 Field `file_table` of `struct module *module` is uninitialized
MEDIUM (4.7)
A flaw was found in Binutils. The use of an uninitialized field in the struct module *module may lead to application crash and local denial of service.
Published: 2023-09-14T20:50:09.526Z
Updated: 2025-02-13T16:44:32.455Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.