CVE-2017-9955

CVE-2017-9955 is a heap-based buffer over-read vulnerability in the GNU Binutils BFD library (libbfd), specifically affecting the get_build_id function in opncls.c. This flaw can lead to a denial of service (application crash) when processing a specially crafted file where a size field exceeds its corresponding data field, as demonstrated by the objdump program. Rated 5.5 Medium, exploitation requires local access and user interaction (e.g., opening a malicious file), resulting in high availability impact but no confidentiality or integrity compromise. There is no evidence of active exploitation, public exploit code, or significant community discussion or media coverage for this vulnerability.