CVE-2020-35342 Information disclosure in n/a
An uninitialized heap vulnerability in GNU Binutils allows attackers to leak sensitive information from memory.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2020-35342?
CVE-2020-35342 is a high-severity vulnerability in Gnu Binutils, published on 22 Aug 2023. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
GNU Binutils before 2.34 has an uninitialized-heap vulnerability in function tic4x_print_cond (file opcodes/tic4x-dis.c) which could allow attackers to make an information leak.
Weakness: CWE-665
Which versions are affected by CVE-2020-35342?
It affects 1 product.
Products include Gnu Binutils.
How do I fix CVE-2020-35342?
Upgrade to a fixed version.
Is CVE-2020-35342 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2020-35342 exists.
Other vulnerabilities in Gnu Binutils
Sources
Also known as CLSA-2025-1761577745, DEBIAN-CVE-2020-35342, GHSA-4j2r-xh73-3xqw, UBUNTU-CVE-2020-35342.