4.8
Medium
CVE-2026-90828 A security flaw has been discovered in GNU Binutils 2.47
Description
A security flaw has been discovered in GNU Binutils 2.47. This vulnerability affects the function elf_orphan_compatible of the file ld/ldelf.c of the component ELF Orphan Section Handler. Performing a manipulation results in null pointer dereference. The attack must be initiated from a local position. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through a bug report but has not responded yet.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Binutils | 2.47 | No fix stated |
References
- VDB-403330 | GNU Binutils ELF Orphan Section ldelf.c elf_orphan_compatible null pointer dereference vuldb.com
- VDB-403330 | CTI Indicators (IOB, IOC, IOA) vuldb.com
- CVE-2026-90828 | CVE Analysis and Report vuldb.com
- Submit #925227 | GNU Binutils 2.47 Memory Corruption vuldb.com
- sourceware.org sourceware.org
- sourceware.org sourceware.org
- www.gnu.org www.gnu.org
Timeline
- Published
- Last modified
Other CVEs of Binutils
The 43 CVEs of Binutils →
CVE-2026-91782
A vulnerability was detected in GNU Binutils 2.47
4.8
Medium
CVE-2026-91781
A security vulnerability has been detected in GNU Binutils 2.47
4.8
Medium
CVE-2026-91780
A weakness has been identified in GNU Binutils 2.47
4.8
Medium
CVE-2026-91779
A security flaw has been discovered in GNU Binutils 2.47
4.8
Medium