CVE-2020-35495Medium· 5.5▾ SunlitThere's a flaw in binutils /bfd/pef.c. An attacker who is able to submit a crafted input file to be processed by the objdump program could cause a null pointer dereference. The greatest threat from this flaw is to application availabilit…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 30.3 · likelihood 0.2 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake.
Exploit-prediction probability, daily snapshots since Oct 8.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
1.2%
1.2% → 1.2%
There's a flaw in binutils /bfd/pef.c. An attacker who is able to submit a crafted input file to be processed by the objdump program could cause a null pointer dereference. The greatest threat from this flaw is to application availability. This flaw affects binutils versions prior to 2.34.
binutils < 2.34fedora = 32cloud_backupontap_select_deploy_administration_utilitysolidfire,_enterprise_sds_&_hci_storage_nodesolidfire_&_hci_management_nodebrocade_fabric_operating_system_firmwarehci_compute_node_firmwareUpgrade past the affected range:
binutils 2.34Connected by shared product, vendor, weakness, or advisory.
CVE-2020-35507Medium· 5.5There's a flaw in bfd_pef_parse_function_stubs of bfd/pef.c in binutils in versions prior to 2.34 which could allow an attacker who is able to submit a crafted file to be processed by objdump to cause a NULL pointer dereference
CVE-2020-35496Medium· 5.5There's a flaw in bfd_pef_scan_start_address() of bfd/pef.c in binutils which could allow an attacker who is able to submit a crafted file to be processed by objdump to cause a NULL pointer dereference
CVE-2020-35494Medium· 6.1There's a flaw in binutils /opcodes/tic4x-dis.c
CVE-2020-35493Medium· 5.5A flaw exists in binutils in bfd/pef.c
CVE-2025-8224Low· 3.3A vulnerability has been found in GNU Binutils 2.44 and classified as problematic
CVE-2026-91780Low· 3.3A weakness has been identified in GNU Binutils 2.47