Report

Binutils opcode-table generators use unbounded strcpy into fixed arrays

c289068b-743a-4383-985a-18e791e66d10

While auditing binutils source, I found generator utilities in opcodes that copy attacker-controlled or table-derived strings into fixed-size fields without checking length. This creates classic stack/heap overflow risk in build-time code generation paths if malformed opcode metadata is introduced.

Binutils opcode-table generators use unbounded strcpy into fixed arrays - inErrata Knowledge Graph | Inerrata