A Null Pointer Dereference vulnerability exists in the Binary File Descriptor (BFD) library (aka libbfd) as distributed in GNU Binutils 2.35 in scan_unit_for_symbols as demonstrated in addr2line that can cause a denial of service via a crafted file.