Binutils
GNU- Product type
- Other
- Catalog vulnerabilities
- 276
Severity across 31 analyzed records
en
Verify to analyze this security profile
As of 09/14/2026, within CyStack's analyzed data, Binutils has 0 security vulnerabilities published in the last 90 days. Of these, 0 are rated High or Critical. None of these vulnerabilities is listed in the CISA KEV catalog. CyStack recommends that organizations and individual users remediate applicable vulnerabilities as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of Binutils and determine which vulnerabilities affect that version.
| Vulnerability | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2026-6846Binutils: binutils: arbitrary code execution via malformed xcoff object file processing | Exploitation statusNot known exploited | FixYes | Published04/22/2026 | SeverityHigh |
CVE-2026-6844Binutils: binutils: denial of service vulnerabilities in readelf via crafted elf files | Exploitation statusNot known exploited | FixNot confirmed | Published04/22/2026 | SeverityMedium |
CVE-2026-6845Binutils: binutils: denial of service via crafted elf file | Exploitation statusNot known exploited | FixNot confirmed | Published04/22/2026 | SeverityMedium |
CVE-2026-4647Binutils: out-of-bounds read in xcoff relocation processing in gnu binutils bfd library | Exploitation statusNot known exploited | FixNot confirmed | Published03/23/2026 | SeverityMedium |
CVE-2026-3441Binutils: gnu binutils: information disclosure via specially crafted xcoff object file | Exploitation statusNot known exploited | FixNot confirmed | Published03/15/2026 | SeverityMedium |
CVE-2026-3442Binutils: gnu binutils: information disclosure or denial of service via out-of-bounds read in bfd linker | Exploitation statusNot known exploited | FixNot confirmed | Published03/15/2026 | SeverityMedium |
CVE-2025-69647 | Exploitation statusPublic exploit | FixNot confirmed | Published03/09/2026 | SeverityMedium |
CVE-2025-69648 | Exploitation statusPublic exploit | FixNot confirmed | Published03/09/2026 | SeverityMedium |
CVE-2025-69651 | Exploitation statusPublic exploit | FixNot confirmed | Published03/06/2026 | SeverityMedium |
CVE-2025-69644 | Exploitation statusPublic exploit | FixNot confirmed | Published03/06/2026 | SeverityMedium |
CVE-2025-69650 | Exploitation statusPublic exploit | FixNot confirmed | Published03/06/2026 | SeverityHigh |
CVE-2025-69646 | Exploitation statusPublic exploit | FixNot confirmed | Published03/06/2026 | SeverityMedium |
CVE-2025-69645 | Exploitation statusPublic exploit | FixNot confirmed | Published03/06/2026 | SeverityMedium |
CVE-2025-69652 | Exploitation statusPublic exploit | FixNot confirmed | Published03/06/2026 | SeverityMedium |
CVE-2025-69649 | Exploitation statusPublic exploit | FixNot confirmed | Published03/06/2026 | SeverityMedium |
CVE-2025-66861 | Exploitation statusPublic exploit | FixNot confirmed | Published12/29/2025 | SeverityLow |
CVE-2025-66864 | Exploitation statusPublic exploit | FixNot confirmed | Published12/29/2025 | SeverityMedium |
CVE-2025-66865 | Exploitation statusPublic exploit | FixNot confirmed | Published12/29/2025 | SeverityHigh |
CVE-2025-66866 | Exploitation statusPublic exploit | FixNot confirmed | Published12/29/2025 | SeverityMedium |
CVE-2025-66863 | Exploitation statusPublic exploit | FixNot confirmed | Published12/29/2025 | SeverityHigh |
CVE-2025-66862 | Exploitation statusPublic exploit | FixNot confirmed | Published12/29/2025 | SeverityHigh |
CVE-2025-11840GNU Binutils ldmisc.c vfinfo out-of-bounds | Exploitation statusPublic exploit | FixYes | Published10/16/2025 | SeverityMedium |
CVE-2025-11839GNU Binutils prdbg.c tg_tag_type return value | Exploitation statusPublic exploit | FixNot confirmed | Published10/16/2025 | SeverityMedium |
CVE-2025-11495GNU Binutils Linker elf64-x86-64.c elf_x86_64_relocate_section heap-based overflow | Exploitation statusPublic exploit | FixYes | Published10/08/2025 | SeverityMedium |
CVE-2025-11494GNU Binutils Linker elfxx-x86.c _bfd_x86_elf_late_size_sections out-of-bounds | Exploitation statusPublic exploit | FixYes | Published10/08/2025 | SeverityMedium |
CVE-2025-11414GNU Binutils Linker elflink.c get_link_hash_entry out-of-bounds | Exploitation statusPublic exploit | FixYes | Published10/07/2025 | SeverityMedium |
CVE-2025-11413GNU Binutils Linker elflink.c elf_link_add_object_symbols out-of-bounds | Exploitation statusPublic exploit | FixYes | Published10/07/2025 | SeverityMedium |
CVE-2025-11412GNU Binutils Linker elflink.c bfd_elf_gc_record_vtentry out-of-bounds | Exploitation statusPublic exploit | FixYes | Published10/07/2025 | SeverityMedium |
CVE-2025-11083GNU Binutils Linker elfcode.h elf_swap_shdr heap-based overflow | Exploitation statusPublic exploit | FixYes | Published09/27/2025 | SeverityMedium |
CVE-2025-11082GNU Binutils Linker elf-eh-frame.c _bfd_elf_parse_eh_frame heap-based overflow | Exploitation statusPublic exploit | FixYes | Published09/27/2025 | SeverityMedium |
CVE-2025-11081GNU Binutils objdump.c dump_dwarf_section out-of-bounds | Exploitation statusPublic exploit | FixYes | Published09/27/2025 | SeverityMedium |
CVE-2025-8225GNU Binutils DWARF Section dwarf.c process_debug_info memory leak | Exploitation statusPublic exploit | FixYes | Published07/27/2025 | SeverityMedium |
CVE-2025-8224GNU Binutils BFD Library elf.c bfd_elf_get_str_section null pointer dereference | Exploitation statusPublic exploit | FixYes | Published07/27/2025 | SeverityMedium |
CVE-2025-7546GNU Binutils elf.c bfd_elf_set_group_contents out-of-bounds write | Exploitation statusPublic exploit | FixYes | Published07/13/2025 | SeverityMedium |
CVE-2025-7545GNU Binutils objcopy.c copy_section heap-based overflow | Exploitation statusPublic exploit | FixYes | Published07/13/2025 | SeverityMedium |
CVE-2025-5245GNU Binutils objdump debug.c debug_type_samep memory corruption | Exploitation statusPublic exploit | FixYes | Published05/27/2025 | SeverityMedium |
CVE-2025-5244GNU Binutils ld elflink.c elf_gc_sweep memory corruption | Exploitation statusPublic exploit | FixYes | Published05/27/2025 | SeverityMedium |
CVE-2025-3198GNU Binutils objdump bucomm.c display_info memory leak | Exploitation statusPublic exploit | FixYes | Published04/04/2025 | SeverityMedium |
CVE-2025-1182GNU Binutils ld elflink.c bfd_elf_reloc_symbol_deleted_p memory corruption | Exploitation statusPublic exploit | FixYes | Published02/11/2025 | SeverityLow |
CVE-2025-1181GNU Binutils ld elflink.c _bfd_elf_gc_mark_rsec memory corruption | Exploitation statusPublic exploit | FixYes | Published02/11/2025 | SeverityLow |
CVE-2025-1180GNU Binutils ld elf-eh-frame.c _bfd_elf_write_section_eh_frame memory corruption | Exploitation statusPublic exploit | FixNot confirmed | Published02/11/2025 | SeverityLow |
CVE-2025-1179GNU Binutils ld libbfd.c bfd_putl64 memory corruption | Exploitation statusPublic exploit | FixYes | Published02/11/2025 | SeverityLow |
CVE-2025-1178GNU Binutils ld libbfd.c bfd_putl64 memory corruption | Exploitation statusPublic exploit | FixYes | Published02/11/2025 | SeverityMedium |
CVE-2025-1176GNU Binutils ld elflink.c _bfd_elf_gc_mark_rsec heap-based overflow | Exploitation statusPublic exploit | FixYes | Published02/11/2025 | SeverityLow |
CVE-2025-1153GNU Binutils format.c bfd_set_format memory corruption | Exploitation statusNot known exploited | FixYes | Published02/10/2025 | SeverityLow |
CVE-2025-1152GNU Binutils ld xstrdup.c xstrdup memory leak | Exploitation statusPublic exploit | FixNot confirmed | Published02/10/2025 | SeverityLow |
CVE-2025-1151GNU Binutils ld xmemdup.c xmemdup memory leak | Exploitation statusPublic exploit | FixNot confirmed | Published02/10/2025 | SeverityLow |
CVE-2025-1150GNU Binutils ld libbfd.c bfd_malloc memory leak | Exploitation statusPublic exploit | FixNot confirmed | Published02/10/2025 | SeverityLow |
CVE-2025-1149GNU Binutils ld xmalloc.c xstrdup memory leak | Exploitation statusPublic exploit | FixNot confirmed | Published02/10/2025 | SeverityLow |
CVE-2025-1148GNU Binutils ld ldelfgen.c link_order_scan memory leak | Exploitation statusPublic exploit | FixNot confirmed | Published02/10/2025 | SeverityLow |
CVE-2025-1147GNU Binutils nm nm.c internal_strlen buffer overflow | Exploitation statusPublic exploit | FixNot confirmed | Published02/10/2025 | SeverityLow |
CVE-2025-0840GNU Binutils objdump.c disassemble_bytes stack-based overflow | Exploitation statusPublic exploit | FixYes | Published01/29/2025 | SeverityMedium |
CVE-2023-25584Out of bounds read in parse_module function in bfd/vms-alpha.c | Exploitation statusNot known exploited | FixNot confirmed | Published09/14/2023 | SeverityMedium |
CVE-2023-25585Field `file_table` of `struct module *module` is uninitialized | Exploitation statusPublic exploit | FixNot confirmed | Published09/14/2023 | SeverityMedium |
CVE-2023-25586Local variable `ch_type` in function `bfd_init_section_decompress_status` can be uninitialized | Exploitation statusPublic exploit | FixNot confirmed | Published09/14/2023 | SeverityMedium |
CVE-2023-25588Field `the_bfd` of `asymbol` is uninitialized in function `bfd_mach_o_get_synthetic_symtab` | Exploitation statusPublic exploit | FixNot confirmed | Published09/14/2023 | SeverityMedium |
CVE-2022-48064 | Exploitation statusPublic exploit | FixNot confirmed | Published08/22/2023 | SeverityUnknown |
CVE-2022-47010 | Exploitation statusNot known exploited | FixNot confirmed | Published08/22/2023 | SeverityUnknown |
CVE-2022-45703 | Exploitation statusPublic exploit | FixNot confirmed | Published08/22/2023 | SeverityUnknown |
CVE-2022-47673 | Exploitation statusPublic exploit | FixNot confirmed | Published08/22/2023 | SeverityUnknown |
CVE-2022-44840 | Exploitation statusPublic exploit | FixNot confirmed | Published08/22/2023 | SeverityUnknown |
CVE-2020-19724 | Exploitation statusPublic exploit | FixNot confirmed | Published08/22/2023 | SeverityUnknown |
CVE-2021-46174 | Exploitation statusPublic exploit | FixNot confirmed | Published08/22/2023 | SeverityUnknown |
CVE-2022-47008 | Exploitation statusPublic exploit | FixNot confirmed | Published08/22/2023 | SeverityUnknown |
CVE-2022-47007 | Exploitation statusPublic exploit | FixNot confirmed | Published08/22/2023 | SeverityUnknown |
CVE-2022-47695 | Exploitation statusPublic exploit | FixNot confirmed | Published08/22/2023 | SeverityUnknown |
CVE-2022-47696 | Exploitation statusPublic exploit | FixNot confirmed | Published08/22/2023 | SeverityUnknown |
CVE-2022-47011 | Exploitation statusPublic exploit | FixNot confirmed | Published08/22/2023 | SeverityUnknown |
CVE-2020-21490 | Exploitation statusNot known exploited | FixNot confirmed | Published08/22/2023 | SeverityUnknown |
CVE-2020-19726 | Exploitation statusPublic exploit | FixNot confirmed | Published08/22/2023 | SeverityUnknown |
CVE-2022-35206 | Exploitation statusPublic exploit | FixNot confirmed | Published08/22/2023 | SeverityUnknown |
CVE-2022-48065 | Exploitation statusPublic exploit | FixNot confirmed | Published08/22/2023 | SeverityUnknown |
CVE-2020-35342 | Exploitation statusPublic exploit | FixNot confirmed | Published08/22/2023 | SeverityUnknown |
CVE-2022-48063 | Exploitation statusNot known exploited | FixNot confirmed | Published08/22/2023 | SeverityUnknown |
CVE-2022-35205 | Exploitation statusNot known exploited | FixNot confirmed | Published08/22/2023 | SeverityMedium |
CVE-2021-32256 | Exploitation statusPublic exploit | FixNot confirmed | Published07/18/2023 | SeverityUnknown |
CVE-2023-1972 | Exploitation statusNot known exploited | FixNot confirmed | Published05/17/2023 | SeverityMedium |
CVE-2023-1579 | Exploitation statusNot known exploited | FixNot confirmed | Published04/03/2023 | SeverityHigh |
CVE-2022-4285 | Exploitation statusNot known exploited | FixNot confirmed | Published01/27/2023 | SeverityMedium |
CVE-2022-38533 | Exploitation statusNot confirmed | FixNot confirmed | Published08/25/2022 | SeverityUnknown |
CVE-2021-45078 | Exploitation statusNot confirmed | FixNot confirmed | Published12/15/2021 | SeverityUnknown |
CVE-2021-37322 | Exploitation statusNot confirmed | FixNot confirmed | Published11/18/2021 | SeverityUnknown |
CVE-2021-3530 | Exploitation statusNot confirmed | FixNot confirmed | Published06/02/2021 | SeverityUnknown |
CVE-2021-3549 | Exploitation statusNot confirmed | FixNot confirmed | Published05/26/2021 | SeverityUnknown |
CVE-2021-20294 | Exploitation statusNot confirmed | FixNot confirmed | Published04/29/2021 | SeverityUnknown |
CVE-2021-20197 | Exploitation statusNot known exploited | FixNot confirmed | Published03/26/2021 | SeverityMedium |
CVE-2021-20284 | Exploitation statusNot confirmed | FixNot confirmed | Published03/26/2021 | SeverityUnknown |
CVE-2020-35507 | Exploitation statusNot confirmed | FixNot confirmed | Published01/04/2021 | SeverityUnknown |
CVE-2020-35496 | Exploitation statusNot confirmed | FixNot confirmed | Published01/04/2021 | SeverityUnknown |
CVE-2020-35495 | Exploitation statusNot confirmed | FixNot confirmed | Published01/04/2021 | SeverityUnknown |
CVE-2020-35494 | Exploitation statusNot confirmed | FixNot confirmed | Published01/04/2021 | SeverityUnknown |
CVE-2020-35493 | Exploitation statusNot confirmed | FixNot confirmed | Published01/04/2021 | SeverityUnknown |
CVE-2020-35448 | Exploitation statusNot confirmed | FixNot confirmed | Published12/27/2020 | SeverityUnknown |
CVE-2020-16599 | Exploitation statusNot confirmed | FixNot confirmed | Published12/09/2020 | SeverityUnknown |
CVE-2020-16593 | Exploitation statusNot confirmed | FixNot confirmed | Published12/09/2020 | SeverityUnknown |
CVE-2020-16592 | Exploitation statusNot confirmed | FixNot confirmed | Published12/09/2020 | SeverityUnknown |
CVE-2020-16591 | Exploitation statusNot confirmed | FixNot confirmed | Published12/09/2020 | SeverityUnknown |
CVE-2020-16590 | Exploitation statusNot confirmed | FixNot confirmed | Published12/09/2020 | SeverityUnknown |
CVE-2019-17450 | Exploitation statusNot confirmed | FixNot confirmed | Published10/10/2019 | SeverityUnknown |
CVE-2019-17451 | Exploitation statusNot confirmed | FixNot confirmed | Published10/10/2019 | SeverityUnknown |
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
Explore CyStack VulnScan