CVE-2021-3487

Name of the Vulnerable Software and Affected Versions binutils versions prior to 2.36

Description The issue is related to insufficient input validation in the read section() function of the dwarf2.c component in the GNU Binutils development tool. This allows a remote attacker to cause a denial of service by consuming excessive memory with a specially crafted file.

Recommendations For versions prior to 2.36, update to version 2.36 or later to resolve the issue. As a temporary workaround, consider restricting the use of the DWARF functionality in applications linked with the BFD library to minimize the risk of exploitation.