An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils through 2.31. There is a heap-based buffer overflow in bfd_elf32_swap_phdr_in in elfcode.h because the number of program headers is not restricted.
https://usn.ubuntu.com/4336-1/
https://sourceware.org/bugzilla/show_bug.cgi?id=23942