A Null Pointer Dereference vulnerability exists in the Binary File Descriptor (BFD) library (aka libbfd) as distributed in GNU Binutils 2.35 in _bfd_elf_get_symbol_version_string as demonstrated in nm-new that can cause a denial of service via a crafted file.