CVE-2018-19931

Description

An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils through 2.31. There is a heap-based buffer overflow in bfd_elf32_swap_phdr_in in elfcode.h because the number of program headers is not restricted.

Weakness classification

• CWE-787: Out-of-bounds Write

Primary references

• cve@mitre.org — Broken Link
• cve@mitre.org — Broken Link
• cve@mitre.org — Broken Link, Third Party Advisory, VDB Entry
• cve@mitre.org — Third Party Advisory
• cve@mitre.org — Patch, Third Party Advisory
• cve@mitre.org — Issue Tracking, Patch, Third Party Advisory
• cve@mitre.org
• cve@mitre.org — Third Party Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Broken Link
• af854a3a-2127-422b-91ae-364da2661108 — Broken Link
• af854a3a-2127-422b-91ae-364da2661108 — Broken Link, Third Party Advisory, VDB Entry
• af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory