2.4
Low
CVE-2026-90804 A vulnerability was detected in GNU Binutils 2.47
Description
A vulnerability was detected in GNU Binutils 2.47. Affected by this issue is the function _bfd_elf_write_section_eh_frame of the file bfd/elf-eh-frame.c of the component Eh Frame Section Handler. Performing a manipulation of the argument cie_length/fde_length/augmentation_data_size/write_offset results in buffer overflow. Attacking locally is a requirement. The exploit is now public and may be used. The project was informed of the problem early through a bug report but has not responded yet.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Binutils | 2.47 | No fix stated |
References
- VDB-403306 | GNU Binutils Eh Frame Section elf-eh-frame.c _bfd_elf_write_section_eh_frame buffer overflow vuldb.com
- VDB-403306 | CTI Indicators (IOB, IOC, IOA) vuldb.com
- CVE-2026-90804 | CVE Analysis and Report vuldb.com
- Submit #920281 | GNU Binutils 2.47 (version date 20260726) Heap-based Buffer Overflow vuldb.com
- sourceware.org sourceware.org
- github.com github.com
- www.gnu.org www.gnu.org
Timeline
- Published
- Last modified
Other CVEs of Binutils
The 43 CVEs of Binutils →
CVE-2026-91782
A vulnerability was detected in GNU Binutils 2.47
4.8
Medium
CVE-2026-91781
A security vulnerability has been detected in GNU Binutils 2.47
4.8
Medium
CVE-2026-91780
A weakness has been identified in GNU Binutils 2.47
4.8
Medium
CVE-2026-91779
A security flaw has been discovered in GNU Binutils 2.47
4.8
Medium