Skip to content
4.8 Medium

CVE-2026-90801 A security flaw has been discovered in GNU Binutils 2.47

Description

A security flaw has been discovered in GNU Binutils 2.47. This impacts the function cache_bwrite of the file bfd/cache.c of the component ld. The manipulation of the argument nbytes results in buffer overflow. The attack requires a local approach. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through a bug report but has not responded yet.

Affected products and versions

Product Affected versions Fixed in
Binutils 2.47 No fix stated
The 43 CVEs of Binutils →
Track this CVE