CVE-2020-35448

LowCVSS 3.3/10Last modified Jun 17, 2026

Description

An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.35.1. A heap-based buffer over-read can occur in bfd_getl_signed_32 in libbfd.c because sh_entsize is not validated in _bfd_elf_slurp_secondary_reloc_section in elf.c.

Metrics

CVSS 3.1 3.3/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-125

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://security.gentoo.org/glsa/202107-24Third Party Advisory
https://security.netapp.com/advisory/ntap-20210129-0008/Third Party Advisory
https://sourceware.org/bugzilla/show_bug.cgi?id=26574Exploit, Issue Tracking, Third Party Advisory
https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=8642dafaef21aa6747cec01df1977e9c52eb4679
https://security.gentoo.org/glsa/202107-24Third Party Advisory
https://security.netapp.com/advisory/ntap-20210129-0008/Third Party Advisory
https://sourceware.org/bugzilla/show_bug.cgi?id=26574Exploit, Issue Tracking, Third Party Advisory
https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=8642dafaef21aa6747cec01df1977e9c52eb4679

Timeline

Published: Dec 27, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-35456.7A vulnerability in Cisco FXOS Software could allow an authenticated, local attacker with administrative credentials to cause a buffer overfl CVE-2020-354507.5Gobby 0.4.11 allows a NULL pointer dereference in the D-Bus handler for certain set_language calls.CVE-2020-354514.7There is a race condition in OozieSharelibCLI in Apache Oozie before version 5.2.1 which allows a malicious attacker to replace the files in CVE-2020-354527.3Apache HTTP Server versions 2.4.0 to 2.4.46 A specially crafted Digest nonce can cause a stack overflow in mod_auth_digest. There is no repo CVE-2020-354535.3HashiCorp Vault Enterprise’s Sentinel EGP policy feature incorrectly allowed requests to be processed in parent and sibling namespaces. Fixe CVE-2020-354546.8The Taidii Diibear Android application 2.4.0 and all its derivatives allow attackers to obtain user credentials from an Android backup becau CVE-2020-354557.8The Taidii Diibear Android application 2.4.0 and all its derivatives allow attackers to obtain user credentials from Shared Preferences and CVE-2020-354565.5The Taidii Diibear Android application 2.4.0 and all its derivatives allow attackers to view private chat messages and media files via logca CVE-2020-354577.8GNOME GLib before 2.65.3 has an integer overflow, that might lead to an out-of-bounds write, in g_option_group_add_entries. NOTE: the vendor CVE-2020-354589.8An issue was discovered in ClusterLabs Hawk 2.x through 2.3.0-x. There is a Ruby shell code injection issue via the hawk_remember_me_id para CVE-2020-354597.8An issue was discovered in ClusterLabs crmsh through 4.2.1. Local attackers able to call "crm history" (when "crm" is run) were able to exec CVE-2020-35465.3A vulnerability in the web-based management interface of Cisco AsyncOS software for Cisco Email Security Appliance (ESA) could allow an unau