The C++ symbol demangler routine in cplus-dem.c in libiberty, as distributed in GNU Binutils 2.29, allows attackers to cause a denial of service (excessive memory allocation and application crash)
via a crafted file, as demonstrated by a call from the Binary File Descriptor (BFD) library (aka libbfd).
Created binutils tracking bugs for this issue:
Affects: fedora-all [bug 1483604]
Created mingw-binutils tracking bugs for this issue:
Affects: epel-all [bug 1483603]
Affects: fedora-all [bug 1483605]