CVE-2020-35493: broadcom brocade_fabric_operating_system_firmware Improper Input Validation
Vulnerability summary
CVE-2020-35493 is a medium (CVSS 5.5) Improper Input Validation vulnerability in broadcom brocade_fabric_operating_system_firmware. EPSS estimates a 1.14% chance of exploitation in the next 30 days, higher than 66% of scored vulnerabilities. 1 public exploit is recorded.
Advisory lineage
Upstream 0 · Downstream 6 · Related 6Timeline
- 04-01-2021PublishedVulnerability first disclosed.
- 08-10-2026Last modifiedVulnerability information updated.
Description
A flaw exists in binutils in bfd/pef.c. An attacker who is able to submit a crafted PEF file to be parsed by objdump could cause a heap buffer overflow -> out-of-bounds read that could lead to an impact to application availability. This flaw affects binutils versions prior to 2.34.
CVSS metrics
4 scores · 3 sources · 2 versions- OSV · UbuntuEcosystem advisory · calculated5.5MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
- OSV · DebianEcosystem advisory · calculated5.5MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
EPSS trend
Probability
1.14%
Chance of exploitation in the next 30 days
Percentile
66%
Versus all other CVEs
30-day change
+0.05 pp
From 1.08% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundExploit Reference (bugzilla.redhat.com)
Maturity: unknown
Weaknesses
CWE · root causeAffected systems
Netapp5 products
Broadcom1 product
Debian1 product
- binutils< 2.33.50.20200107-1
Fedoraproject1 product
- fedoraEOL32
Gnu1 product
- binutils< 2.34
Ubuntu1 product
- binutils< 2.34-6ubuntu1
6 vendors · 10 products
References
8 links- bugzilla.redhat.com/show_bug.cgi?id=1911437X Refsource MISCExploitIssue TrackingPatchThird Party Advisory
