An out of bounds flaw was found in GNU binutils objdump utility version 2.36. An attacker could use this flaw and pass a large section to avr_elf32_lo...

原文の説明

取得元が公開している説明をそのまま載せています (多くは英語)。

An out of bounds flaw was found in GNU binutils objdump utility version 2.36. An attacker could use this flaw and pass a large section to avr_elf32_load_records_from_section() probably resulting in a crash or in some cases memory corruption. The highest threat from this vulnerability is to integrity as well as system availability.

出典: OSV.dev (Open Source Vulnerabilities) OSV

影響パッケージ

Debian:12 binutils

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.37-3"}]}]

Debian:13 binutils

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.37-3"}]}]

Debian:14 binutils

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.37-3"}]}]

参照URL

advisory security-tracker.debian.org