elflink.c in the Binary File Descriptor (BFD) library (aka libbfd) as distributed in GNU Binutils 2.28 has a \member access within null pointer\ undefined behavior issue which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via an \int main() {return 0;}\ program.