CVE-2020-35507

There's a flaw in bfd_pef_parse_function_stubs of bfd/pef.c in binutils in versions prior to 2.34 which could allow an attacker who is able to submit a crafted file to be processed by objdump to cause a NULL pointer dereference. The greatest threat of this flaw is to application availability.

Affected products

Alt Linux, Astra Linux, Suse, Binutils

Gnu Binutils

< 2.34

Fix

Available

CVSS 3.1

5.5 MEDIUM

EPSS

1.2% (67th percentile)

Weakness

CWE-476

NVD status

Modified

Published

2021-01-04

No exploit for CVE-2020-35507 has been indexed yet. Our index is built from live traffic and upstream syncs, so this page can only say what it knows — not that no exploit exists.