An out-of-bounds read flaw was found in the parse_module function in bfd/vms-alpha.c in Binutils.
gnu binutils