CVE-2018-18700Medium· 5.5▾ SunlitAn issue was discovered in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31. There is a stack consumption vulnerability resulting from infinite recursion in the functions d_name(), d_encoding(), and d_local_name() in c…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 30.3 · likelihood 0.3 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
1.7%
An issue was discovered in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31. There is a stack consumption vulnerability resulting from infinite recursion in the functions d_name(), d_encoding(), and d_local_name() in cp-demangle.c. Remote attackers could leverage this vulnerability to cause a denial-of-service via an ELF file, as demonstrated by nm.
binutils = 2.31Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2019-14250Medium· 5.5An issue was discovered in GNU libiberty, as distributed in GNU Binutils 2.32
CVE-2019-12972Medium· 5.5An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32
CVE-2025-8224Low· 3.3A vulnerability has been found in GNU Binutils 2.44 and classified as problematic
CVE-2025-7546Medium· 5.3A vulnerability, which was classified as problematic, has been found in GNU Binutils 2.45
CVE-2025-7545Medium· 5.3A vulnerability classified as problematic was found in GNU Binutils 2.45
CVE-2025-5244Medium· 5.3A vulnerability was found in GNU Binutils up to 2.44