CVE-2026-18220

An out-of-bounds write vulnerability was found in the BFD library's DLX ELF backend bfd/elf32-dlx.c in GNU binutils. The dlxrtypetohowto function maps ELF relocation types to internal howto structures but fails to perform adequate bounds checking on attacker-controlled relocation type values via...

CVE-2026-18220 Binutils: binutils: out-of-bounds write in bfd dlx elf backend relocation processing

An out-of-bounds write vulnerability was found in the BFD library's DLX ELF backend bfd/elf32-dlx.c in GNU binutils. The dlxrtypetohowto function maps ELF relocation types to internal howto structures but fails to perform adequate bounds checking on attacker-controlled relocation type values via...

CVE-2026-18220: Out-of-bounds Write

An out-of-bounds write vulnerability was found in the BFD library's DLX ELF backend bfd/elf32-dlx.c in GNU binutils. The dlxrtypetohowto function maps ELF relocation types to internal howto structures but fails to perform adequate bounds checking on attacker-controlled relocation type values via...

binutils: GNU Binutils: Memory corruption via local manipulation of ELF String Table

A flaw was found in GNU Binutils. This vulnerability allows a local attacker to cause memory corruption by manipulating the ELF String Table component, specifically through the bfdelfstrtabdelref function. This could lead to unexpected behavior or system instability...

binutils: GNU Binutils: Null pointer dereference via SHT_GROUP Section manipulation

A flaw was found in GNU Binutils. A local attacker can exploit this vulnerability by manipulating the SHTGROUP Section. This manipulation can lead to a null pointer dereference within the bfdelfsetgroupcontents function. The primary consequence of this flaw is a denial of service...

binutils: GNU Binutils: Denial of service via null pointer dereference in ld component

A flaw was found in GNU Binutils. A local attacker can exploit a null pointer dereference vulnerability in the bfdputl64 function of the ld component. This can lead to a denial of service or application instability...

binutils: GNU Binutils ld: Buffer overflow in cache_bwrite via nbytes manipulation

A flaw was found in GNU Binutils. A buffer overflow vulnerability exists in the cachebwrite function within the bfd/cache.c file of the ld component. This flaw can be triggered by manipulating the nbytes argument, allowing a local attacker to potentially cause information disclosure or denial of...

binutils: GNU Binutils: Local denial of service via null pointer dereference in Section Merge

A flaw was found in GNU Binutils. This vulnerability, located in the bfdwritemergedsection function within the Section Merge component, allows a local attacker to trigger a null pointer dereference. This can lead to a denial of service DoS condition, making the affected system or application...

binutils: GNU Binutils ld: Buffer Overflow via Malformed Relocation

A flaw was found in GNU Binutils. A local attacker could exploit a buffer overflow vulnerability in the elfx8664relocatesection function of the ld component by providing a malformed relocation. This could lead to potential information disclosure, data corruption, or denial of service...

binutils: GNU Binutils: Null pointer dereference via elf_orphan_compatible function

A flaw was found in GNU Binutils. A local attacker, by performing a manipulation, can cause a null pointer dereference in the elforphancompatible function. This could lead to a denial of service or other unpredictable behavior...

binutils: GNU Binutils: Buffer overflow in Eh Frame Section Handler can lead to denial of service

A flaw was found in GNU Binutils. A buffer overflow vulnerability exists in the bfdelfwritesectionehframe function, part of the Eh Frame Section Handler. A local attacker can exploit this by providing specially crafted input that manipulates arguments such as cielength or fdelength. This...

AZL-94211 CVE-2026-15003 affecting package gdb for versions less than 13.2-11

A flaw was found in the GNU Binutils Binary Utilities linker. This vulnerability, a heap-buffer-overflow read CWE-125, occurs when the linker processes a specially crafted 32-bit XCOFF Extended Common Object File Format object file. An attacker could exploit this by providing a malicious file,...

AZL-94187 CVE-2026-15003 affecting package binutils for versions less than 2.41-13

A flaw was found in the GNU Binutils Binary Utilities linker. This vulnerability, a heap-buffer-overflow read CWE-125, occurs when the linker processes a specially crafted 32-bit XCOFF Extended Common Object File Format object file. An attacker could exploit this by providing a malicious file,...

CVE-2026-15003

A flaw was found in the GNU Binutils Binary Utilities linker. This vulnerability, a heap-buffer-overflow read CWE-125, occurs when the linker processes a specially crafted 32-bit XCOFF Extended Common Object File Format object file. An attacker could exploit this by providing a malicious file,...

CVE-2026-15003 Binutils: gnu binutils: heap-buffer-overflow in linker leads to information disclosure and denial of service

A flaw was found in the GNU Binutils Binary Utilities linker. This vulnerability, a heap-buffer-overflow read CWE-125, occurs when the linker processes a specially crafted 32-bit XCOFF Extended Common Object File Format object file. An attacker could exploit this by providing a malicious file,...

EUVD-2026-49202

A flaw was found in the GNU Binutils Binary Utilities linker. This vulnerability, a heap-buffer-overflow read CWE-125, occurs when the linker processes a specially crafted 32-bit XCOFF Extended Common Object File Format object file. An attacker could exploit this by providing a malicious file,...

CVE-2026-15003

CVE-2026-15003 affects the GNU Binutils linker. A heap-buffer-overflow read (CWE-125) occurs when processing a crafted 32-bit XCOFF object file, enabling an out-of-bounds memory read. This may cause information disclosure of heap data and a Denial of Service through linker crash. No specific vers...

CVE-2026-15003

A flaw was found in the GNU Binutils Binary Utilities linker. This vulnerability, a heap-buffer-overflow read CWE-125, occurs when the linker processes a specially crafted 32-bit XCOFF Extended Common Object File Format object file. An attacker could exploit this by providing a malicious file,...

objdump-Out-Of-Bounds-write — Updated!

GNU Binutils objdump — OOB Write → FSOP → Arbitrary Code Execution Target: GNU Binutils all versions through HEAD — objdump Environment: Debian 13 Trixie, glibc 2.41, x8664 Impact: Arbitrary code execution Vector: Crafted ELF file processed by objdump -g ASLR: Bypassed deterministic mmap delta...

PT-2026-64906

Name of the Vulnerable Software and Affected Versions GNU Binutils affected versions not specified Description A heap-buffer-overflow read occurs in the linker when processing a specially crafted 32-bit XCOFF Extended Common Object File Format object file. An attacker can provide a malicious file...