Known vulnerabilities in binutils

Vendor: openEuler
Software: binutils
Software CPE: cpe:2.3:o:openeuler:binutils:*:*:*:*:*:openeuler:*:*
Website: https://www.openeuler.org/
Total vulnerabilities: 20
Public exploits: 2
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting binutils binutils is affected by 20 known vulnerabilities: 2 high, 4 medium, 14 low Critical High Medium Low

Vulnerabilities (20)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU116966 - Memory corruption
CVE-2025-11412		 CWE-119 Low
No
No
 2.41-28 14.10.2025 SB2025082140
SB2025110773
SB2025110774
and 12 more
#VU114345 - Heap-based Buffer Overflow
CVE-2025-7545		 CWE-122 Low
No
No
 2.34-38, 2.37-36, 2.41-17, 2.41-24 21.08.2025 SB2025082140
SB2025082142
SB2025082143
and 12 more
#VU107136 - Missing release of memory after effective lifetime
CVE-2025-3198		 CWE-401 Low
No
No
 2.41-15 08.04.2025 SB2025040819
SB2025053045
SB2025082173
and 5 more
#VU103887 - Stack-based buffer overflow
CVE-2025-0840		 CWE-121 High
No
No
 2.34-33, 2.37-28, 2.37-30, 2.41-10, 2.41-14 12.02.2025 SB2025021209
SB2025021210
SB2025021211
and 9 more
#VU103886 - Memory corruption
CVE-2024-57360		 CWE-119 High
No
No
 2.37-28, 2.37-30, 2.41-10, 2.41-14 12.02.2025 SB2025021209
SB2025021210
SB2025021211
and 4 more
#VU86948 - Resource exhaustion
CVE-2022-48064		 CWE-400 Low
No
No
 2.34-28, 2.37-23, 2.37-25 01.03.2024 SB2024011543
SB2023090907
SB2023090908
and 18 more
#VU84095 - Out-of-bounds write
CVE-2021-46174		 CWE-787 Low
No
No
 2.34-26 12.12.2023 SB2023121216
SB2023121220
SB2023090217
and 3 more
#VU83862 - Missing release of memory after effective lifetime
CVE-2022-47011		 CWE-401 Low
No
No
 2.34-26 05.12.2023 SB2023120506
SB2023120507
SB2023120511
and 4 more
#VU83860 - Missing release of memory after effective lifetime
CVE-2022-47008		 CWE-401 Low
No
No
 2.34-26 05.12.2023 SB2023120506
SB2023120507
SB2023120511
and 4 more
#VU79354 - NULL Pointer Dereference
CVE-2020-16599		 CWE-476 Low
No
No
 2.37-23, 2.37-25 10.08.2023 SB2023081017
SB2023090907
SB2023090908
and 7 more
#VU79345 - Use After Free
CVE-2020-16592		 CWE-416 Low
No
No
 2.34-9 10.08.2023 SB2023081017
SB2021040736
SB2021110232
and 5 more
#VU76486 - Heap-based Buffer Overflow
CVE-2023-1972		 CWE-122 Medium
No
No
 2.37-23, 2.37-25 24.05.2023 SB20230818251
SB20230818252
SB20230818253
and 15 more
#VU76453 - NULL Pointer Dereference
CVE-2022-4285		 CWE-476 Low
No
No
 2.37-23, 2.37-25 23.05.2023 SB2023052341
SB2023052342
SB2023052436
and 38 more
#VU66492 - UNIX Symbolic Link (Symlink) Following
CVE-2021-20197		 CWE-61 Low
No
No
 2.34-9 15.08.2022 SB2021042942
SB2022081546
SB2021111042
and 7 more
#VU61550 - Improper input validation
CVE-2021-3487		 CWE-20 Medium
No
No
 2.34-10 23.03.2022 SB2021041527
SB2022032315
SB2022081546
and 11 more
#VU59295 - Out-of-bounds write
CVE-2021-3549		 CWE-787 Medium
No
No
 2.34-11 07.01.2022 SB2021052642
SB2022010708
SB2022081546
and 1 more
#VU59293 - Out-of-bounds write
CVE-2021-45078		 CWE-787 Medium
No
No
 2.34-18 07.01.2022 SB2022010707
SB2022032315
SB2022081546
and 10 more
#VU57848 - Improper input validation
CVE-2021-42574		 CWE-20 Low
Available
No
 2.34-19 02.11.2021 SB2021110201
SB2021110205
SB2021110206
and 64 more
#VU25898 - Exposure of sensitive information to an unauthorized actor
CVE-2020-0551		 CWE-200 Low
Available
No
 2.34-9 10.03.2020 SB2020031017
SB2020031020
SB2021040736
#VU13471 - Heap-based Buffer Overflow
CVE-2018-12699		 CWE-122 Low
No
No
 2.34-18 25.06.2018 SB2018041305
SB2021123106
SB2024111503
and 8 more