The demangle_template_value_parm and do_hpacc_template_literal functions in cplus-dem.c in libiberty allow remote attackers to cause a denial of service (out-of-bounds read and crash) via a crafted binary. http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4493
