CVE-2017-14529

The pe_print_idata function in peXXigen.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, mishandles HintName vector entries, which allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted PE file, related to the bfd_getl16 function.

• CWE-125

• https://sourceware.org/bugzilla/show_bug.cgi?id=22113Issue Tracking, Patch, Third Party Advisory
• https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=4d465c689a8fb27212ef358d0aee89d60dee69a6
• https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=dcaaca89e8618eba35193c27afcb1cfa54f74582
• https://sourceware.org/bugzilla/show_bug.cgi?id=22113Issue Tracking, Patch, Third Party Advisory
• https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=4d465c689a8fb27212ef358d0aee89d60dee69a6
• https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=dcaaca89e8618eba35193c27afcb1cfa54f74582

Published

Sep 18, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-14523WonderCMS 2.3.1 is vulnerable to an HTTP Host header injecti…
• CVE-2017-14524Multiple open redirect vulnerabilities in OpenText Documentu…
• CVE-2017-14525Multiple open redirect vulnerabilities in OpenText Documentu…
• CVE-2017-14526Multiple XML external entity (XXE) vulnerabilities in the Op…
• CVE-2017-14527Multiple XML external entity (XXE) vulnerabilities in the Op…
• CVE-2017-14528The TIFFSetProfiles function in coders/tiff.c in ImageMagick…6.5
• CVE-2017-1453IBM Security Access Manager Appliance 9.0.3 could allow a re…
• CVE-2017-14530WP_Admin_UI in the Crony Cronjob Manager plugin before 0.4.7…8
• CVE-2017-14531ImageMagick 7.0.7-0 has a memory exhaustion issue in ReadSUN…
• CVE-2017-14532ImageMagick 7.0.7-0 has a NULL Pointer Dereference in TIFFIg…
• CVE-2017-14533ImageMagick 7.0.6-6 has a memory leak in ReadMATImage in cod…
• CVE-2017-14534Cross Site Scripting (XSS) exists in NexusPHP 1.5.beta5.2012…