CVE-2021-3549: GNU Binutils

High severity, CVSS 7.1. EPSS: 1% chance of exploitation in the next 30 days.

An out of bounds flaw was found in GNU binutils objdump utility version 2.36. An attacker could use this flaw and pass a large section to avr_elf32_load_records_from_section() probably resulting in a crash or in some cases memory corruption. The highest threat from this vulnerability is to integrity as well as system availability.

Affected products

• GNU Binutils: version 2.36 only

Published 2021-05-26. Last modified 2026-06-17.