CVE-2021-37322: GNU Binutils

High severity, CVSS 7.8. EPSS: 0.9% chance of exploitation in the next 30 days.

GCC c++filt v2.26 was discovered to contain a use-after-free vulnerability via the component cplus-dem.c.

Affected products

• GNU Binutils: before 2.32 (fixed in 2.32)
• GNU Gcc: before 10.1 (fixed in 10.1)

Published 2021-11-18. Last modified 2026-06-17.