GNU Binutils before 2.40 was discovered to contain a memory leak vulnerability var the function findabstractinstance in dwarf2.c.
{
"versions": [
{
"introduced": "0"
},
{
"fixed": "2.40"
},
{
"introduced": "0"
},
{
"last_affected": "39"
}
]
}