CVE-2021-3530

State: Published
Severity: Not scored
Published: Jun 2, 2021
Updated: Aug 3, 2024
Reserved: May 3, 2021

Description

A flaw was discovered in GNU libiberty within demangle_path() in rust-demangle.c, as distributed in GNU Binutils version 2.36. A crafted symbol can cause stack memory to be exhausted leading to a crash.

Scores

The record has no CVSS score.

Weaknesses

CWE-674

Affected Products

Product	Versions
binutilsn/a	GNU Binutils version before and including 2.36Affected

References

https://bugzilla.redhat.com/show_bug.cgi?id=1956423
https://src.fedoraproject.org/rpms/binutils/blob/rawhide/f/binutils-CVE-2021-3530.patch
https://security.netapp.com/advisory/ntap-20210716-0006/
GLSA-202208-30vendor-advisory

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.