CVE-2006-2362
High · 7.3CVSS
7.3
EPSS
14.5%
Published
May 15, 2006
CISA due date
—
The record
Buffer overflow in getsym in tekhex.c in libbfd in Free Software Foundation GNU Binutils before 20060423, as used by GNU strings, allows context-dependent attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a file with a crafted Tektronix Hex Format (TekHex) record in which the length character is not a valid hexadecimal character.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:10 | binutils | 0 | 2.17-1 |
| Debian:11 | binutils | 0 | 2.17-1 |
| Debian:12 | binutils | 0 | 2.17-1 |
| Debian:13 | binutils | 0 | 2.17-1 |
| Debian:14 | binutils | 0 | 2.17-1 |
Related vulnerabilities
- CVE-2005-4807 Stack-based buffer overflow in the as_bad function in messages.c in the GNU as (gas)… Also affects binutils
- CVE-2026-54240 libde265 is an open source implementation of the h.265 video codec. CWE-787
- CVE-2026-0799 In BPF instructions that load/store a value from/to a scratch memory register the… CWE-787
- CVE-2026-85091 zlib versions 1.3.1.2 through 1.3.2 contain a heap buffer overflow vulnerability in the… CWE-787
- CVE-2026-13732 A flaw was found in GDB's STABS debug format parser. CWE-787
- CVE-2026-18393 A flaw was found in FFmpeg. CWE-787
- CVE-2026-18374 Passing an effectively empty string to the `,ccs=` syntax extension of the mode argument… CWE-787
- CVE-2026-68514 OpenEXR is the reference implementation and specification for the EXR image file format… CWE-787