CVE-2017-9751: opcodes/rl78-decode.opc in GNU Binutils 2.28 has an unbounded GETBYTE macro, which allows remote attackers...

Security readout for executives and security teams

CVE-2017-9751 is a flaw in GNU Binutils 2.28 that can crash analysis tooling when it processes a specially crafted binary file. The cited record specifically demonstrates failure during objdump disassembly. Business urgency is highest where build, security, or malware-analysis systems process untrusted binaries automatically. Exposure is most likely on systems using GNU Binutils 2.28 or downstream packages to inspect untrusted binaries. This includes build pipelines, binary triage workflows, reverse-engineering workstations, and automated security scanners. The source bundle does not identify all affected distributions or versions beyond GNU Binutils 2.28. Treat this as a targeted tooling resilience issue, not a broad internet-exposed emergency. Patch or isolate affected analysis workflows, especially where crafted binaries can enter automated pipelines and disrupt security or build operations. Mitigation focus: Check vendor guidance for fixed GNU Binutils packages.; Prioritize systems that process untrusted binary files automatically.; Restrict untrusted binary analysis to isolated environments..

Prepared

Jun 13, 2026, 04:43 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.