CVE-2020-35494

mediumpriority · track · 24EPSS 0.011 · 66 %ileEURUUS

grimoire priorityP3 · Track

Exploitable?

—

no known exploitation

Likely / severe?

1.13% (66th) EPSS

CVSS 5.8 · medium

Is it mine?

18 products

Check your exposure

Who says so?

4 sources

cnnvd · enisa_euvd · fstec_bdu · nvd

EPSS · scored 2026-10-27

There's a flaw in binutils /opcodes/tic4x-dis.c. An attacker who is able to submit a crafted input file to be processed by binutils could cause usage of uninitialized memory. The highest threat is to application availability with a lower threat to data confidentiality. This flaw affects binutils versions prior to 2.34.

cvss

Technical severity, 0–10. One row per scoring source.

6.1

010

base score 0–10 · higher = more severe · hover a vector to decode

v2.05.8mediumAV:N/AC:M/Au:N/C:P/I:N/A:Pprimary · NVD / NIST USexploitability 8.6 · impact 4.9

v3.16.1mediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:Hprimary · NVD / NIST USexploitability 1.8 · impact 4.2

v3.16.1mediumAV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:Hsecondary · FSTEC (BDU) RU

v3.15.6mediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H/E:Usecondary · CVSS-BT (t0sche)

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-908USCWE-908US

affected products (18)

Products and version ranges known to be affected.

n/a Binutils≤ binutils 2.34enisa_euvdEU
GNU General Public License GNU Binutils≤ 2.34fstec_bduRU
Red Hat, Inc. Red Hat Enterprise Linux≤ 8fstec_bduRU
АО «НТЦ ИТ РОСА» ROSA Virtualization 3.0≤ 3.0fstec_bduRU
ООО «РусБИТех-Астра» Astra Linux Special Edition≤ 4.7fstec_bduRU
ООО «РусБИТех-Астра» Astra Linux Special Edition≤ 1.7fstec_bduRU
ООО «РусБИТех-Астра» Astra Linux Special Edition для «Эльбрус»≤ 8.1 «Ленинград»fstec_bduRU
Сообщество свободного программного обеспечения Debian GNU/Linux≤ 11fstec_bduRU
Сообщество свободного программного обеспечения Debian GNU/Linux≤ 12fstec_bduRU
Сообщество свободного программного обеспечения Debian GNU/Linux≤ 10fstec_bduRU
broadcom brocade fabric operating system firmwareall versionsnvdUScpe:2.3:o:broadcom:brocade_fabric_operating_system_firmware:*:*:*:*:*:*:*:*
fedoraproject fedora= 32nvdUScpe:2.3:o:fedoraproject:fedora:*:*:*:*:*:*:*:*
gnu binutils< 2.34nvdUScpe:2.3:a:gnu:binutils:*:*:*:*:*:*:*:*
netapp cloud backupall versionsnvdUScpe:2.3:a:netapp:cloud_backup:*:*:*:*:*:*:*:*
netapp hci compute node firmwareall versionsnvdUScpe:2.3:o:netapp:hci_compute_node_firmware:*:*:*:*:*:*:*:*
netapp ontap select deploy administration utilityall versionsnvdUScpe:2.3:a:netapp:ontap_select_deploy_administration_utility:*:*:*:*:*:*:*:*
netapp solidfire & hci management nodeall versionsnvdUScpe:2.3:a:netapp:solidfire_\&_hci_management_node:*:*:*:*:*:*:*:*
netapp solidfire, enterprise sds & hci storage nodeall versionsnvdUScpe:2.3:a:netapp:solidfire\,_enterprise_sds_\&_hci_storage_node:*:*:*:*:*:*:*:*

also known as (4)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd fstec_bdu nvd NVD CVE.org MITRE

published 2021-01-04modified 2026-10-09

references (18)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan