CVE-2020-35493

Name of the Vulnerable Software and Affected Versions binutils versions prior to 2.34

Description The issue is caused by a heap buffer overflow in the bfd pef parse function stubs function in bfd/pef.c, which can lead to an out-of-bounds read. This can be exploited by submitting a crafted PEF file to be parsed by objdump, potentially impacting application availability.

Recommendations For versions prior to 2.34, update to version 2.34 or later to resolve the issue. As a temporary workaround, consider restricting the use of the objdump tool with crafted PEF files until a patch is available. Avoid using the bfd pef parse function stubs function in bfd/pef.c with untrusted input until the issue is resolved.