CVE-2019-12972
MEDIUMGNU Binutils - Out-of-Bounds Read
Title source: ruleDescription
An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32. There is a heap-based buffer over-read in _bfd_doprnt in bfd.c because elf_object_p in elfcode.h mishandles an e_shstrndx section of type SHT_GROUP by omitting a trailing '\0' character.
References (7)
Scores
CVSS v3
5.5
EPSS
0.0062
EPSS Percentile
69.6%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Classification
CWE
CWE-125
Status
published
Affected Products (4)
gnu/binutils
opensuse/leap
opensuse/leap
canonical/ubuntu_linux
Timeline
Published
Jun 26, 2019
Tracked Since
Feb 18, 2026