CVE-2020-35448

Name of the Vulnerable Software and Affected Versions GNU Binutils version 2.35.1

Description A heap-based buffer over-read issue was discovered in the Binary File Descriptor (BFD) library, which can occur in bfd getl signed 32 in libbfd.c because sh entsize is not validated in bfd elf slurp secondary reloc section in elf.c. This issue may allow an attacker to gain unauthorized access to protected information.

Recommendations For GNU Binutils version 2.35.1, consider updating to a newer version that contains a fix for this issue, as the current version is affected by a heap-based buffer over-read in the BFD library. At the moment, there is no information about a newer version that contains a fix for this vulnerability.