Skip to main content
VulnerabilityPublished Updated

bfd_getl16 · OSV-2026-973: Heap-buffer-overflow

Affects binutilsSource GCVE Database

0
Severity
Medium

Rated by Threat Radar

Patch
Available – fixed in 11f57b156514211af29b93588c0fee2f8b3e66e4

Data as of 29 Jun 2026, 22:12 UTC

What to do

Upgrade binutils to 11f57b156514211af29b93588c0fee2f8b3e66e4.

Affected software

ProductAffectedFixed in
OSS-Fuzzbinutilspkg:generic/binutilsOther threatsAffected
  • binutils-2_44 – gdb-17.2-release
  • >=e814012b2b108743e21b7ef2799310a0f4e0a86d <11f57b156514211af29b93588c0fee2f8b3e66e4
  • >=9542d1b3a05477c415d870b7b652cdde75a5c8ea
13 affected builds		Fixed in
  • 11f57b156514211af29b93588c0fee2f8b3e66e4

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

Description

A heap-buffer-overflow vulnerability has been identified in the binutils project, specifically in the function bfd_getl16. The issue was reported by OSS-Fuzz and involves a read overflow on the heap.

References

Community reviews

Loading reviews…