CVE-2017-12459

The bfd_mach_o_read_symtab_strtab function in bfd/mach-o.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause an out of bounds heap write and possibly achieve code execution via a crafted mach-o file.

• CWE-787

• https://sourceware.org/bugzilla/show_bug.cgi?id=21840Issue Tracking, Patch, Third Party Advisory
• https://sourceware.org/bugzilla/show_bug.cgi?id=21840Issue Tracking, Patch, Third Party Advisory

Published

Aug 4, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-12453The _bfd_vms_slurp_eeom function in libbfd.c in the Binary F…
• CVE-2017-12454The _bfd_vms_slurp_egsd function in bfd/vms-alpha.c in the B…
• CVE-2017-12455The evax_bfd_print_emh function in vms-alpha.c in the Binary…
• CVE-2017-12456The read_symbol_stabs_debugging_info function in rddbg.c in …
• CVE-2017-12457The bfd_make_section_with_flags function in section.c in the…
• CVE-2017-12458The nlm_swap_auxiliary_headers_in function in bfd/nlmcode.h …
• CVE-2017-12460An issue was discovered in Barco ClickShare CSM-1 firmware b…
• CVE-2017-12463Memory leak in the ccnl_app_RX function in ccnl-uapi.c in CC…
• CVE-2017-12464ccn-lite-valid.c in CCN-lite before 2.00 allows context-depe…
• CVE-2017-12465Multiple integer overflows in CCN-lite before 2.00 allow con…
• CVE-2017-12466CCN-lite before 2.00 allows context-dependent attackers to h…
• CVE-2017-12467Memory leak in CCN-lite before 2.00 allows context-dependent…