ihex.c in GNU Binutils before 2.26 contains a stack buffer overflow when printing bad bytes in Intel Hex objects. http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-9939