CVE-2018-19932: GNU Binutils

Medium severity, CVSS 5.5. EPSS: 2% chance of exploitation in the next 30 days.

An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils through 2.31. There is an integer overflow and infinite loop caused by the IS_CONTAINED_BY_LMA macro in elf.c.

Affected products

• GNU Binutils: up to and including 2.31
• Netapp Vasa Provider: from 7.2

Published 2018-12-07. Last modified 2026-06-17.