CVE-2017-12450

The alpha_vms_object_p function in bfd/vms-alpha.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause an out of bounds heap write and possibly achieve code execution via a crafted vms alpha file.

• CWE-787

• https://sourceware.org/bugzilla/show_bug.cgi?id=21813Issue Tracking, Patch, Third Party Advisory
• https://sourceware.org/bugzilla/show_bug.cgi?id=21813Issue Tracking, Patch, Third Party Advisory

Published

Aug 4, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-12444The mdjvu_bitmap_get_bounding_box function in base/4bitmap.c…
• CVE-2017-12445The JB2BitmapCoder::code_row_by_refinement function in jb2/b…
• CVE-2017-12447GdkPixBuf (aka gdk-pixbuf), possibly 2.32.2, as used by GNOM…
• CVE-2017-12448The bfd_cache_close function in bfd/cache.c in the Binary Fi…
• CVE-2017-12449The _bfd_vms_save_sized_string function in vms-misc.c in the…
• CVE-2017-1245IBM Rational Software Architect Design Manager 5.0 and 6.0 i…
• CVE-2017-12451The _bfd_xcoff_read_ar_hdr function in bfd/coff-rs6000.c and…
• CVE-2017-12452The bfd_mach_o_i386_canonicalize_one_reloc function in bfd/m…
• CVE-2017-12453The _bfd_vms_slurp_eeom function in libbfd.c in the Binary F…
• CVE-2017-12454The _bfd_vms_slurp_egsd function in bfd/vms-alpha.c in the B…
• CVE-2017-12455The evax_bfd_print_emh function in vms-alpha.c in the Binary…
• CVE-2017-12456The read_symbol_stabs_debugging_info function in rddbg.c in …