GNU Binutils before 2.34 has an uninitialized-heap vulnerability in function tic4xprintcond (file opcodes/tic4x-dis.c) which could allow attackers to make an information leak.
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-35342.json"