VULNERABILITY INTELLIGENCE

CVE-2017-12450

CVSS score7.8 HIGH
EPSS probability1.88%
CISA KEVNot currently listed
Published2017-08-04
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Description

The alpha_vms_object_p function in bfd/vms-alpha.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause an out of bounds heap write and possibly achieve code execution via a crafted vms alpha file.

Weakness classification

  • CWE-787: Out-of-bounds Write

Primary references