CVE-2016-4490 PUBLISHED

Integer overflow in cp-demangle.c in libiberty allows remote attackers to cause a denial of service (segmentation fault and crash) via a crafted binary, related to inconsistent use of the long and int types for lengths.

EPSS 0.61% · 69.6th percentile

Risk Scores

EPSS Score
0.61%
69.6th percentile

Affected Products

VendorProductVersions
Ubuntu:18.04:LTSnescc1.3.5-1, 0, 1.3.5-1.1
Ubuntu:16.04:LTSgccxml0, 0.9.0+git20140716-6
Ubuntu:20.04:LTSgcc-h8300-hms1:3.4.6+dfsg2-4ubuntu3, 0, 1:3.4.6+dfsg2-4.1
Ubuntu:24.04:LTSbinutils-h8300-hms0, 2.16.1-10build1
Ubuntu:16.04:LTSvalgrind1:3.11.0-1ubuntu2, 0, 1:3.11.0-1ubuntu1
Ubuntu:16.04:LTSsdcc3.4.0+dfsg-2ubuntu1, 3.5.0+dfsg-1, 3.5.0+dfsg-2
Ubuntu:18.04:LTSbinutils-h8300-hms2.16.1-10, 0, 2.16.1-10build1
Ubuntu:16.04:LTSgcc-h8300-hms0, 1:3.4.6+dfsg2-4ubuntu1
Ubuntu:16.04:LTSgcc-arm-none-eabi0, 15:4.9.3+svn227297-1build1, 15:4.9.3+svn231177-1
Ubuntu:16.04:LTSht0, 2.1.0-1, 2.1.0-1build1
Ubuntu:16.04:LTSbinutils-h8300-hms2.16.1-10, 0
Ubuntu:22.04:LTSbinutils-h8300-hms0, 2.16.1-10build1
Ubuntu:14.04:LTSgdb7.7.1-0ubuntu5~14.04.2, 0, 7.6.1-0ubuntu3
Ubuntu:25.10binutils-h8300-hms2.16.1-10build1, 0
Ubuntu:16.04:LTSnescc1.3.5-1, 0
Ubuntu:24.04:LTSgcc-h8300-hms1:3.4.6+dfsg2-4.2, 0
Ubuntu:22.04:LTSgcc-h8300-hms1:3.4.6+dfsg2-4.2, 0, 1:3.4.6+dfsg2-4.1
Ubuntu:25.10gcc-h8300-hms0, 1:3.4.6+dfsg2-4.2
Ubuntu:22.04:LTSnescc0, 1.3.5-1.1build1
Ubuntu:Pro:14.04:LTSbinutils2.24-5ubuntu13, 0, 2.23.52.20130913-0ubuntu1

…and 9 more

Timeline

References

Open in Interactive Console →