CVE-2017-6969
binutils: Heap-based buffer over-read in readelf when processing corrupt RL78 binaries
Loading…
Severity
LowRed Hat Product Security
CVSS 3.0
Review impact separately from score.
Published · February 14, 2017
Updated · March 5, 2026
Description
readelf in GNU Binutils 2.28 is vulnerable to a heap-based buffer over-read while processing corrupt RL78 binaries. The vulnerability can trigger program crashes. It may lead to an information leak as well.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.0 · 4.4CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L
CWE-125 · Out-of-bounds Read