Bug ID: #1763102 Title: Multiple memory corruptions in objdump (binutils-2.30-15ubuntu1) Status: Confirmed Importance: Undecided Assigned to: Unassigned CVE References: 2018-12697, 2018-12698, 2018-12699, 2018-12700 Description Memory corruptions found in binutils objdump using a modified kAFL fuzzer. Includes crashing inputs and ASAN reports. Steps to reproduce using the latest binutils version and running under ASAN. Verified for objdump binutils-2.30-15ubuntu1 (Ubuntu 16.04.4 LTS). Actions Reported to binutils developers: https://sourceware.org/bugzilla/show_bug.cgi?id=23057 Reported to libiberty developers: https://gcc.gnu.org/bugzilla/show_bug.cgi?id=85454 Binutils team needs to evaluate and fix the issue for an Ubuntu security update.