The C++ symbol demangler routine in cplus-dem.c in libiberty as distributed in GNU Binutils 2.29 allows remote attackers to cause a denial of service (excessive memory allocation and application crash) via a crafted file as demonstrated by a call from the Binary File Descriptor (BFD) library (aka libbfd).