CVE-2020-16599: GNU Binutils

Medium severity, CVSS 5.5. EPSS: 1.1% chance of exploitation in the next 30 days.

A Null Pointer Dereference vulnerability exists in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.35, in _bfd_elf_get_symbol_version_string, as demonstrated in nm-new, that can cause a denial of service via a crafted file.

Affected products

• GNU Binutils: version 2.35 only
• Netapp Cloud Backup: affected versions not specified
• Netapp Hci Management Node: affected versions not specified
• Netapp Ontap Select Deploy Administration Utility: affected versions not specified
• Netapp Solidfire: affected versions not specified

Published 2020-12-09. Last modified 2026-06-17.