The get_count function in cplus-dem.c in GNU libiberty as distributed in GNU Binutils 2.31 allows remote attackers to cause a denial of service (malloc called with the result of an integer-overflowing calculation) or possibly have unspecified other impact via a crafted string as demonstrated by c++filt.