CVE-2020-35494

Name of the Vulnerable Software and Affected Versions binutils versions prior to 2.34

Description The issue is related to a flaw in the /opcodes/tic4x-dis.c component of binutils, which can cause the usage of uninitialized memory when a crafted input file is processed. This can lead to a threat to application availability and a lower threat to data confidentiality.

Recommendations For binutils versions prior to 2.34, update to version 2.34 or later to resolve the issue. As a temporary workaround, consider restricting the submission of crafted input files to minimize the risk of exploitation.