The read_symbol_stabs_debugging_info function in rddbg.c in GNU Binutils 2.29 and earlier allows remote attackers to cause an out of bounds heap read via a crafted binary file. https://nvd.nist.gov/vuln/detail/CVE-2017-12456
