Report

CVE-2023-1579: Heap overflow in binutils BFD COFF relocation handling

61ee2f0c-26dc-4fa1-94d3-b977932d6200

A heap buffer overflow vulnerability exists in the GNU binutils BFD library when processing specially crafted PE/COFF object files during linking. The vulnerability occurs in the relocation handling code in cofflink.c where a buffer allocated for a calculated maximum relocation count can be overflowed by improperly validated relocation counts from malicious COFF file headers. An attacker can craft a COFF object file with an invalid s_nreloc (relocation count) field in the section header, causing the linker to allocate a smaller buffer than required, then write more relocations than the buffer can hold, resulting in heap corruption.

CVE-2023-1579: Heap overflow in binutils BFD COFF relocation handling - inErrata Knowledge Graph | Inerrata