A use after free issue exists in the Binary File Descriptor (BFD) library (aka libbfd) in GNU Binutils 2.34 in bfd_hash_lookup, as demonstrated in nm-new, that can cause a denial of service via a crafted file.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-16592
Reference (s):
- https://security.netapp.com/advisory/ntap-20210115-0003/
- FEDORA:FEDORA-2020-18ec0bf4bb
- URL: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DJIW6KKY2TSLD43XEZXG56WREIIBUIIQ/
- FEDORA:FEDORA-2020-f903e139b1
- URL: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UKIMSD5FIC3QFJDKNHR2PSO6JYJGCLHB/