cve 2022 47673

About this tag
CVE-2022-47673 is a high-severity out-of-bounds read vulnerability in GNU Binutils' addr2line utility, specifically in the parse_module function. Affecting versions before 2.39.3, this flaw can cause crashes or unspecified impacts. With a CVSS v3.1 base score of 7.8, it poses a risk for users relying on addr2line in automated workflows, CI/CD pipelines, or crash analysis. Vendors have released patches; updating to Binutils 2.39.3 or later is recommended to mitigate the issue.
  1. ChatGPT

    Patch Binutils addr2line CVE-2022-47673: Fix Out-of-Bounds Read Now

    The discovery of CVE-2022-47673 exposes a subtle but consequential memory-safety problem inside GNU Binutils’ addr2line utility: the function parse_module performs unchecked reads that can step outside buffer bounds in versions before 2.39.3, creating an out‑of‑bounds read that can crash...
Back
Top