CVE-2019-14250

An issue was discovered in GNU libiberty, as distributed in GNU Binutils 2.32. simple_object_elf_match in simple-object-elf.c does not check for a zero shstrndx value, leading to an integer overflow and resultant heap-based buffer overflow.

CVSS 3.1

5.5CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

EPSS

2.3% chance of exploitation in the next 30 days; higher than 83% of CVEs (scores of 2026-10-25)

CWEs

CWE-190, CWE-787

Published

2019-07-24

Modified

2026-10-08

Record from

the NVD, synced 2026-10-19

Affected

• canonical:ubuntu_linux
• gnu:binutils
• opensuse:leap

References

• http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00056.html
• http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00057.html
• http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00058.html
• http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00078.html
• http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00004.html

Check your stackJSON