CVE-2026-18220

The CVE-2026-18220 vulnerability affects the GNU binutils BFD library’s DLX ELF backend (source file bfd/elf32-dlx.c). The root cause is an insufficient bounds check in dlx_rtype_to_howto() on ELF32_R_TYPE(r_info) before indexing into dlx_elf_howto_table[], despite non-contiguous DLX relocation t...

EUVD-2026-50279

An out-of-bounds write vulnerability was found in the BFD library's DLX ELF backend bfd/elf32-dlx.c in GNU binutils. The dlxrtypetohowto function maps ELF relocation types to internal howto structures but fails to perform adequate bounds checking on attacker-controlled relocation type values via...

CVE-2026-18220 Binutils: binutils: out-of-bounds write in bfd dlx elf backend relocation processing

An out-of-bounds write vulnerability was found in the BFD library's DLX ELF backend bfd/elf32-dlx.c in GNU binutils. The dlxrtypetohowto function maps ELF relocation types to internal howto structures but fails to perform adequate bounds checking on attacker-controlled relocation type values via...

CVE-2026-18220

An out-of-bounds write vulnerability was found in the BFD library's DLX ELF backend bfd/elf32-dlx.c in GNU binutils. The dlxrtypetohowto function maps ELF relocation types to internal howto structures but fails to perform adequate bounds checking on attacker-controlled relocation type values via...

CVE-2026-18220 Binutils: binutils: out-of-bounds write in bfd dlx elf backend relocation processing

An out-of-bounds write vulnerability was found in the BFD library's DLX ELF backend bfd/elf32-dlx.c in GNU binutils. The dlxrtypetohowto function maps ELF relocation types to internal howto structures but fails to perform adequate bounds checking on attacker-controlled relocation type values via...

CVE-2026-18220: Out-of-bounds Write

An out-of-bounds write vulnerability was found in the BFD library's DLX ELF backend bfd/elf32-dlx.c in GNU binutils. The dlxrtypetohowto function maps ELF relocation types to internal howto structures but fails to perform adequate bounds checking on attacker-controlled relocation type values via...

NewStart CGSL MAIN 6.06 : binutils Vulnerability (NS-SA-2026-0062)

The remote NewStart CGSL host, running version MAIN 6.06, has binutils packages installed that are affected by a vulnerability: - A vulnerability, which was classified as problematic, was found in GNU Binutils up to 2.43. This affects the function disassemblebytes of the file binutils/objdump.c...

Linux Distros Unpatched Vulnerability : CVE-2026-18220

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An out-of-bounds write vulnerability was found in the BFD library's DLX ELF backend bfd/elf32-dlx.c in GNU binutils. The dlxrtypetohowto function maps ELF...

binutils: GNU Binutils: Heap-buffer-overflow in linker leads to information disclosure and denial of service

A flaw was found in the GNU Binutils Binary Utilities linker. This vulnerability, a heap-buffer-overflow read CWE-125, occurs when the linker processes a specially crafted 32-bit XCOFF Extended Common Object File Format object file. An attacker could exploit this by providing a malicious file,...

binutils: GNU Binutils: Memory corruption via local manipulation of ELF String Table

A flaw was found in GNU Binutils. This vulnerability allows a local attacker to cause memory corruption by manipulating the ELF String Table component, specifically through the bfdelfstrtabdelref function. This could lead to unexpected behavior or system instability...

binutils: GNU Binutils: Buffer overflow in Eh Frame Section Handler can lead to denial of service

A flaw was found in GNU Binutils. A buffer overflow vulnerability exists in the bfdelfwritesectionehframe function, part of the Eh Frame Section Handler. A local attacker can exploit this by providing specially crafted input that manipulates arguments such as cielength or fdelength. This...

binutils: GNU Binutils: Local denial of service via null pointer dereference in Section Merge

A flaw was found in GNU Binutils. This vulnerability, located in the bfdwritemergedsection function within the Section Merge component, allows a local attacker to trigger a null pointer dereference. This can lead to a denial of service DoS condition, making the affected system or application...

binutils: GNU Binutils: Null pointer dereference via SHT_GROUP Section manipulation

A flaw was found in GNU Binutils. A local attacker can exploit this vulnerability by manipulating the SHTGROUP Section. This manipulation can lead to a null pointer dereference within the bfdelfsetgroupcontents function. The primary consequence of this flaw is a denial of service...

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: binutils: binutils-2.46.1-1.1.hum1 aarch64, x8664 binutils-devel-2.46.1-1.1.hum1 aarch64, x8664 binutils-gold-2.46.1-1.1.hum1 aarch64, x8664 binutils-gprofng-2.46.1-1.1.hum1 aarch64, x8664...

binutils: GNU Binutils: Denial of service via null pointer dereference in ld component

A flaw was found in GNU Binutils. A local attacker can exploit a null pointer dereference vulnerability in the bfdputl64 function of the ld component. This can lead to a denial of service or application instability...

binutils: GNU Binutils: Null pointer dereference via elf_orphan_compatible function

A flaw was found in GNU Binutils. A local attacker, by performing a manipulation, can cause a null pointer dereference in the elforphancompatible function. This could lead to a denial of service or other unpredictable behavior...

binutils: GNU Binutils ld: Buffer overflow in cache_bwrite via nbytes manipulation

A flaw was found in GNU Binutils. A buffer overflow vulnerability exists in the cachebwrite function within the bfd/cache.c file of the ld component. This flaw can be triggered by manipulating the nbytes argument, allowing a local attacker to potentially cause information disclosure or denial of...

binutils: GNU Binutils ld: Buffer Overflow via Malformed Relocation

A flaw was found in GNU Binutils. A local attacker could exploit a buffer overflow vulnerability in the elfx8664relocatesection function of the ld component by providing a malformed relocation. This could lead to potential information disclosure, data corruption, or denial of service...

CVE-2026-15003

A flaw was found in the GNU Binutils Binary Utilities linker. This vulnerability, a heap-buffer-overflow read CWE-125, occurs when the linker processes a specially crafted 32-bit XCOFF Extended Common Object File Format object file. An attacker could exploit this by providing a malicious file,...

AZL-94211 CVE-2026-15003 affecting package gdb for versions less than 13.2-11

A flaw was found in the GNU Binutils Binary Utilities linker. This vulnerability, a heap-buffer-overflow read CWE-125, occurs when the linker processes a specially crafted 32-bit XCOFF Extended Common Object File Format object file. An attacker could exploit this by providing a malicious file,...