CVE-2019-9074
MEDIUMGNU Binutils - Out-of-Bounds Read
Title source: ruleDescription
An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32. It is an out-of-bounds read leading to a SEGV in bfd_getl32 in libbfd.c, when called from pex64_get_runtime_function in pei-x86_64.c.
References (7)
Scores
CVSS v3
5.5
EPSS
0.0009
EPSS Percentile
24.9%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Classification
CWE
CWE-125
Status
published
Affected Products (4)
gnu/binutils
netapp/hci_management_node
netapp/solidfire
canonical/ubuntu_linux
Timeline
Published
Feb 24, 2019
Tracked Since
Feb 18, 2026