CVE-2017-7224

Name of the Vulnerable Software and Affected Versions GNU Binutils version 2.28

Description The issue arises from the find nearest line function in objdump, which is part of GNU Binutils. It is vulnerable to an invalid write when disassembling a corrupt binary containing an empty function name. This can lead to a program crash.

Recommendations For GNU Binutils version 2.28, consider avoiding the disassembly of binaries with empty function names until a patch is available. As a temporary workaround, restrict the use of the find nearest line function in objdump when dealing with potentially corrupt binaries.