CVE-2014-9939: GNU Binutils

Critical severity, CVSS 9.8. EPSS: 2.3% chance of exploitation in the next 30 days.

ihex.c in GNU Binutils before 2.26 contains a stack buffer overflow when printing bad bytes in Intel Hex objects.

Affected products

• GNU Binutils: up to and including 2.25

Published 2017-03-21. Last modified 2026-06-17.