CVE-2018-20671: GNU Binutils

Medium severity, CVSS 5.5. EPSS: 2% chance of exploitation in the next 30 days.

load_specific_debug_section in objdump.c in GNU Binutils through 2.31.1 contains an integer overflow vulnerability that can trigger a heap-based buffer overflow via a crafted section size.

Affected products

• GNU Binutils: up to and including 2.31.1

Published 2019-01-04. Last modified 2026-06-17.