Ecosystem	Package	Version

Vulnerabilities

CVE-2020-35493

CVE-2020-35493

A flaw exists in binutils in bfd/pef.c. An attacker who is able to submit a crafted PEF file to be parsed by objdump could cause a heap buffer overflow -> out-of-bounds read that could lead to an impact to application availability. This flaw affects binutils versions prior to 2.34.

Published Mar 3, 2026

https://bugzilla.redhat.com/show_bug.cgi?id=1911437

CVSS ScoreMedium

5.5

Ecosystem	Package	Version


conan	bincrafters/binutils	2.32
rpm	binutils	2.17.50.0.6-14.el5
rpm	binutils	2.20.51.0.2-5.11.el6
rpm	binutils	2.20.51.0.2-5.20.el6
rpm	binutils	2.20.51.0.2-5.20.el6_1.1
rpm	binutils	2.20.51.0.2-5.28.el6
rpm	binutils	2.20.51.0.2-5.34.el6
rpm	binutils	2.20.51.0.2-5.36.el6
rpm	binutils	2.20.51.0.2-5.42.el6
rpm	binutils	2.20.51.0.2-5.43.0.10.el6
rpm	binutils	2.20.51.0.2-5.43.el6
rpm	binutils	2.20.51.0.2-5.44.el6
rpm	binutils	2.20.51.0.2-5.46.el6
rpm	binutils	2.20.51.0.2-5.47.0.4.el6_9.1
rpm	binutils	2.20.51.0.2-5.47.el6_9.1
rpm	binutils	2.20.51.0.2-5.48.0.1.el6_10.1
rpm	binutils	2.20.51.0.2-5.48.0.3.el6_10.1
rpm	binutils	2.20.51.0.2-5.48.el6
rpm	binutils	2.20.51.0.2-5.48.el6_10.1
rpm	binutils	2.23.52.0.1-16.el7
rpm	binutils	2.23.52.0.1-30.el7
rpm	binutils	2.23.52.0.1-30.el7_1.1
rpm	binutils	2.23.52.0.1-30.el7_1.2
rpm	binutils	2.23.52.0.1-55.el7
rpm	binutils	2.25.1-22.base.el7
rpm	binutils	2.25.1-31.base.el7
rpm	binutils	2.25.1-32.base.el7_4.1
rpm	binutils	2.25.1-32.base.el7_4.2
rpm	binutils	2.27-27.base.0.1.el7
rpm	binutils	2.27-27.base.0.4.el7
rpm	binutils	2.27-27.base.0.6.el7
rpm	binutils	2.27-27.base.0.8.el7
rpm	binutils	2.27-27.base.el7
rpm	binutils	2.27-28.base.0.2.el7_5.1
rpm	binutils	2.27-28.base.el7_5.1
rpm	binutils	2.27-34.base.0.1.el7
rpm	binutils	2.27-34.base.0.2.el7
rpm	binutils	2.27-34.base.0.4.el7
rpm	binutils	2.27-41.base.0.1.el7
rpm	binutils	2.27-41.base.0.1.el7_7.1
rpm	binutils	2.27-41.base.0.2.el7
rpm	binutils	2.27-41.base.0.2.el7_7.1
rpm	binutils	2.27-41.base.0.2.el7_7.2
rpm	binutils	2.27-41.base.0.2.el7_7.3
rpm	binutils	2.27-41.base.0.3.el7_7.1
rpm	binutils	2.27-41.base.0.5.el7_7.1
rpm	binutils	2.27-41.base.0.7.el7_7.2
rpm	binutils	2.27-41.base.0.7.el7_7.3
rpm	binutils	2.27-43.base.0.1.el7
rpm	binutils	2.27-43.base.0.1.el7_8.1

CVE-2020-35493 | Components Impacted | Sonatype Guide | Sonatype Guide