CVE-2020-35494: broadcom brocade_fabric_operating_system_firmware Use of Uninitialized Resource
Vulnerability summary
CVE-2020-35494 is a medium (CVSS 6.1) Use of Uninitialized Resource vulnerability in broadcom brocade_fabric_operating_system_firmware. EPSS estimates a 1.13% chance of exploitation in the next 30 days, higher than 65.7% of scored vulnerabilities. 1 public exploit is recorded.
Timeline
- 04-01-2021PublishedVulnerability first disclosed.
- 08-10-2026Last modifiedVulnerability information updated.
Description
There's a flaw in binutils /opcodes/tic4x-dis.c. An attacker who is able to submit a crafted input file to be processed by binutils could cause usage of uninitialized memory. The highest threat is to application availability with a lower threat to data confidentiality. This flaw affects binutils versions prior to 2.34.
CVSS metrics
4 scores · 3 sources · 2 versions- OSV · UbuntuEcosystem advisory · calculated6.1MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H
- OSV · DebianEcosystem advisory · calculated6.1MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H
EPSS trend
Probability
1.13%
Chance of exploitation in the next 30 days
Percentile
66%
Versus all other CVEs
30-day change
+0.05 pp
From 1.07% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundExploit Reference (bugzilla.redhat.com)
Maturity: unknown
Weaknesses
CWE · root causeAffected systems
Netapp5 products
Broadcom1 product
Debian1 product
- binutils< 2.33.50.20200107-1
Fedoraproject1 product
- fedoraEOL32
Gnu1 product
- binutils< 2.34
Ubuntu1 product
- binutils< 2.34-6ubuntu1
6 vendors · 10 products
References
8 links- bugzilla.redhat.com/show_bug.cgi?id=1911439X Refsource MISCExploitIssue TrackingPatchThird Party Advisory
