ihex.c in GNU Binutils prior to 2.26 contains a stack buffer overflow when printing bad bytes in Intel Hex objects.
gnu binutils