CVE-2023-25584 Out of bounds read in parse_module function in bfd/vms

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Multiple CVEs Identified in Binutils Leading to Out of Bounds Read Vulnerabilities CVE-2023-25584 and CVE-2022-47673 are two vulnerabilities found in Binutils. CVE-2023-25584, published on September 14, 2023, involves an out of bounds read in the parse_module function. CVE-2022-47673, published on August 22, 2023, also involves multiple out of bounds reads in the addr2line function, potentially causing denial of service. 2 sources 39