The nlm_swap_auxiliary_headers_in function in bfd/nlmcode.h in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause an out of bounds heap read via a crafted nlm file.
The product reads data past the end, or before the beginning, of the intended buffer.
Link | Tags |
---|---|
https://sourceware.org/bugzilla/show_bug.cgi?id=21840 | patch third party advisory issue tracking |