Affected: Alpaquita:25: binutils, Alpaquita:stream: binutils, BellSoft Hardened Containers:25: binutils, BellSoft Hardened Containers:stream: binutils

GNU Binutils thru 2.46 readelf contains a null pointer dereference vulnerability when processing a crafted ELF binary with malformed header fields. During relocation processing, an invalid or null section pointer may be passed into display_relocations(), resulting in a segmentation fault (SIGSEGV) and abrupt termination. No evidence of memory corruption beyond the null pointer dereference, nor any possibility of code execution, was observed.

GNU Binutils thru 2.46 readelf contains a null pointer dereference vulnerability when processing a crafted ELF binary with malformed header fields. During relocation processing, an invalid or null section pointer may be passed into display_relocations(), resulting in a segmentation fault (SIGSEGV) and abrupt termination. No evidence of memory corruption beyond the null pointer dereference, nor any possibility of code execution, was observed.

binutils-2.47-1.1 on GA media

binutils: GNU Binutils out-of-bounds read binutils: GNU Binutils Linker heap-based overflow binutils: GNU Binutils Linker heap-based overflow binutils: GNU Binutils Linker elflink.c bfd_elf_gc_record_vtentry out-of-bounds binutils: GNU Binutils Linker elflink.c elf_link_add_object_symbols out-of-bounds binutils: GNU Binutils Linker elflink.c get_link_hash_entry out-of-bounds binutils: GNU Binutils Linker out-of-bounds read binutils: GNU Binutils Linker heap-based overflow binutils: GNU Binutils prdbg.c tg_tag_type return value binutils: GNU Binutils out-of-bounds read binutils: out-of-bounds read in d_unqualified_name() in cp-demangle.c binutils: heap-based buffer over-read in gnu_special() in cplus-dem.c binutils: BinUtils: Denial of Service via crafted PE file binutils: NULL pointer dereference in d_print_comp_inner() in cp-demangle.c binutils: stack overflow in d_print_comp_inner() in cp-demangle.c binutils: BinUtils: Denial of Service via crafted PE file binutils: Binutils: Denial of Service via crafted binary with malformed DWARF debug information binutils: Binutils objdump: Denial of Service via crafted DWARF debug information binutils: Binutils: Denial of Service via malformed DWARF debug_rnglists data binutils: infinite loop in readelf via crafted binary with malformed DWARF loclists data binutils: infinite loop in readelf via crafted binary with malformed DWARF .debug_rnglists data binutils: NULL pointer dereference in readelf via crafted ELF binary with malformed h…

Affected: Ubuntu:25.10: binutils

GNU Binutils thru 2.46 readelf contains a null pointer dereference vulnerability when processing a crafted ELF binary with malformed header fields. During relocation processing, an invalid or null section pointer may be passed into display_relocations(), resulting in a segmentation fault (SIGSEGV) and abrupt termination. No evidence of memory corruption beyond the null pointer dereference, nor any possibility of code execution, was observed.

Ein lokaler Angreifer kann mehrere Schwachstellen in binutils ausnutzen, um einen Denial of Service Angriff durchzuführen.