CVE-2017-9753: The versados_mkobject function in bfd/versados.c in the Binary File Descriptor (BFD) library (aka libbfd),...

Security readout for executives and security teams

CVE-2017-9753 is a memory handling flaw in GNU Binutils' BFD library as shipped in 2.28. A crafted binary file can crash tools that parse it, such as objdump. The main business risk is disruption to build, reverse-engineering, malware-analysis, or file-inspection workflows that process untrusted binaries. Exposure is most likely where GNU Binutils 2.28 or libbfd-based tools process externally supplied binaries, attachments, firmware, malware samples, or customer uploads. Internet-facing exposure is indirect unless a service automatically analyzes uploaded binaries. Treat this as a targeted tooling-risk issue, not an emergency internet-exposed vulnerability based on available evidence. Prioritize environments that automatically inspect untrusted binaries or support security analysis operations. Mitigation focus: Inventory GNU Binutils and libbfd versions in developer, CI, and analysis environments.; Check GNU Binutils or OS vendor guidance for fixed packages addressing CVE-2017-9753.; Avoid processing untrusted binaries with affected tools outside isolated analysis environments..

Prepared

Jun 13, 2026, 04:43 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.