CVE-2020-16593: GNU Binutils

Medium severity, CVSS 5.5. EPSS: 1.2% chance of exploitation in the next 30 days.

A Null Pointer Dereference vulnerability exists in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.35, in scan_unit_for_symbols, as demonstrated in addr2line, that can cause a denial of service via a crafted file.

Affected products

• GNU Binutils: version 2.35 only
• Netapp Cloud Backup: affected versions not specified
• Netapp Ontap Select Deploy Administration Utility: affected versions not specified
• Netapp Solidfire & Hci Management Node: affected versions not specified

Published 2020-12-09. Last modified 2026-06-17.