Local variable `ch_type` in function `bfd_init_section_decompress_status` can be uninitialized

Summary

A flaw was found in Binutils. A logic fail in the bfd_init_section_decompress_status function may lead to the use of an uninitialized variable that can cause a crash and local denial of service.

Timeline

1. Sep 14, 2023, 8:49 PM UTCCVE published
2. Sep 25, 2024, 6:21 PM UTCCISA SSVC assessment

   Exploitation: poc · Automatable: no · Technical impact: partial

3. Feb 13, 2025, 4:44 PM UTCRecord last updated

Affected versions

• n/a binutils

  Version range not reported

• binutils

  Version range not reported

• binutils

  Version range not reported

• gdb

  Version range not reported

• binutils

  Version range not reported

• gcc-toolset-11-binutils

  Version range not reported

• gcc-toolset-11-gdb

  Version range not reported

• gcc-toolset-12-binutils

  Version range not reported

• gcc-toolset-12-gdb

  Version range not reported

• gdb

  Version range not reported

• binutils

  Version range not reported

• gcc-toolset-12-binutils

  Version range not reported

• gcc-toolset-12-gdb

  Version range not reported

• gdb

  Version range not reported

• gdb

  Version range not reported

• mingw-binutils

  Version range not reported

• radare2

  Version range not reported

• radare2

  Version range not reported

• radare2

  Version range not reported

• binutils

  Version range not reported

• insight

  Version range not reported

• binutils

  Version range not reported

• mingw-binutils

  Version range not reported

• insight

  Version range not reported

• binutils

  Version range not reported

• radare2

  Version range not reported

• rizin

  Version range not reported

• rizin

  Version range not reported

References 5