CVE-2017-9755: opcodes/i386-dis.c in GNU Binutils 2.28 does not consider the number of registers for bnd mode, which allow...

Security readout for executives and security teams

GNU Binutils 2.28 can crash when objdump processes a specially crafted binary file. The main business risk is denial of service in systems that automatically inspect untrusted files, such as build, malware analysis, or artifact-scanning pipelines. Public sources do not establish active exploitation. Exposure is most likely where GNU Binutils 2.28, especially objdump, processes binaries from external users, suppliers, malware samples, CI artifacts, or package repositories. Systems that never analyze untrusted binaries have lower practical exposure. Prioritize remediation for automated analysis, CI, security research, and artifact-processing environments. Treat general desktops or servers as lower priority unless they process untrusted binary files. Mitigation focus: Identify and replace GNU Binutils 2.28 where vendor updates are available.; Follow GNU Binutils, OS vendor, or Gentoo GLSA guidance for fixed packages.; Avoid processing untrusted binaries with vulnerable objdump versions..

Prepared

Jun 13, 2026, 04:43 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.