An out-of-bounds read vulnerability in the BFD library of GNU Binutils affects the functions xcoff_ppc_relocate_section() and xcoff64_ppc_relocate_section() in coff-rs6000.c and coff64-rs6000.c. The flaw is caused by improper validation of the relocation type field (r_type), which is read from input files and used as an array index without adequate bounds checking. This issue affects all versions of GNU Binutils prior to 2.47. When a specially crafted XCOFF object file is processed, this can lead to out-of-bounds memory access, potentially causing a crash, information disclosure, or unintended control flow behavior.
The functions xcoff_ppc_relocate_section() and xcoff64_ppc_relocate_section() in coff-rs6000.c and coff64-rs6000.c are impacted by an out-of-bounds read vulnerability in the BFD library of GNU Binutils. https://snowrider-2.io