A double free vulnerability exists in the Binary File Descriptor (BFD) (aka libbrd) in GNU Binutils 2.35 in the processsymboltable, as demonstrated in readelf, via a crafted file.
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-16590.json"