cvedb.io
CVE-2019-9074
MEDIUM · CVSS 5.5
EPSS exploitation probability: 0%
Published 2019-02-24T00:29:00.457 · Last modified 2026-06-17T02:43:01.370

Summary

An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32. It is an out-of-bounds read leading to a SEGV in bfd_getl32 in libbfd.c, when called from pex64_get_runtime_function in pei-x86_64.c.

Affected products

gnu — binutils

Does this affect you?

Add your gear to cvedb and we'll alert you only when gnu ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.