opcodes/i386-dis.c in GNU Binutils 2.28 does not consider the number of registers for bnd mode, which allows attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during "objdump -D" execution. Upstream bug: https://sourceware.org/bugzilla/show_bug.cgi?id=21594 Upstream patch: https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=0d96e4df4812c3bad77c229dfef47a9bc115ac12 https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=8cac017d35ef374e65acc98818a17cf8a652cbd0 References:
Created binutils tracking bugs for this issue: Affects: fedora-all [bug 1469658] Created mingw-binutils tracking bugs for this issue: Affects: epel-all [bug 1469659]