CVE-2017-8395

CVE-2017-8395 describes an invalid write vulnerability in the Binary File Descriptor (BFD) library (libbfd), specifically in GNU Binutils 2.28. This flaw stems from a missing malloc() return-value check within the _bfd_generic_get_section_contents function, leading to crashes in programs like objcopy that utilize libbfd for binary analysis. With a CVSS score of 7.5 (HIGH), this vulnerability is remotely exploitable with low attack complexity and no user interaction required, primarily impacting availability. The EPSS score is very low, indicating minimal likelihood of exploitation. There is no evidence of active exploitation, nor are there any public exploit modules available in Metasploit or ExploitDB. Community discussion and media coverage for this CVE are virtually nonexistent, suggesting a lack of widespread attention or exploitation.