OSV-2026-350

See a problem?
Import Source
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/binutils/OSV-2026-350.yaml
JSON Data
https://api.osv.dev/v1/vulns/OSV-2026-350
Published
2026-03-04T00:14:56.651284Z
Modified
2026-03-14T18:43:19.427139Z
Summary
UNKNOWN READ in bfd_getl32
Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=489127262

Crash type: UNKNOWN READ
Crash state:
bfd_getl32
mips32_64bit_reloc
bfd_perform_relocation
References

Affected packages

OSS-Fuzz / binutils

Package

Name
binutils
Purl
pkg:generic/binutils

Affected versions

Other
binutils-2_44
binutils-2_45
binutils-2_45_1
binutils-2_46
gdb-16-branchpoint
gdb-17-branchpoint
gdb-15.*
gdb-15.2-release
gdb-16.*
gdb-16.1-release
gdb-16.2-release
gdb-16.3-release
gdb-17.*
gdb-17.1-release

Ecosystem specific

{
    "severity": "MEDIUM"
}

Database specific

source
"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/binutils/OSV-2026-350.yaml"
fixed_range
"6a52e6013e34fbf2ae1e2b9799f06cc787bb58fa:00605b2da7a0651a490783636f4a90060ad63c08"
introduced_range
"80f2ae843a3c0968b34db51e4bb62a4610fa685d:db856d41004301b3a56438efd957ef5cabb91530"