CVE-2021-3530

HIGH 7.5CVE-2021-3530 · Published 02/06/2021 · updated 17/06/2026

In short

CVE-2021-3530 is a HIGH (CVSS 7.5) vulnerability affecting binutils (gnu).
Chance of exploitation in the next 30 days (EPSS): 2.4%, higher than 84.0% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
binutils gnu	`= 2.36`	No fix yet

Description

A flaw was discovered in GNU libiberty within demangle_path() in rust-demangle.c, as distributed in GNU Binutils version 2.36. A crafted symbol can cause stack memory to be exhausted leading to a crash.

References

bugzilla.redhat.com/show_bug.cgi · Issue Tracking
security.gentoo.org/glsa/202208-30 · Third Party Advisory
security.netapp.com/advisory/ntap-20210716-0006 · Third Party Advisory
src.fedoraproject.org/rpms/binutils/blob/rawhide/f/binutils-CVE-2021-3530.patch · Patch

More vulnerabilities in binutils

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

binutils

gnu

= 2.36

No fix yet

More vulnerabilities in binutils

See all →