CVE-2026-81879 radare2: Heap out-of-bounds read in radare2 ELF PN_XNUM handling

radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's ELF PNXNUM handling was vulnerable because the ELF parser allocated the program-header array using the resolved PNXNUM count but several consumers still iterated with the original ephnum value...

EUVD-2026-84504

radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's ELF PNXNUM handling was vulnerable because the ELF parser allocated the program-header array using the resolved PNXNUM count but several consumers still iterated with the original ephnum value...

CVE-2026-25262

Memory corruption while processing a crafted ELF file in the Primary Bootloader...

CVE-2026-25262 Write-what-where Condition in Primary Bootloader

Memory corruption while processing a crafted ELF file in the Primary Bootloader...

CVE-2026-25262 Write-what-where Condition in Primary Bootloader

Memory corruption while processing a crafted ELF file in the Primary Bootloader...

CVE-2026-25262

CVE-2026-25262 is a write-what-where memory corruption in the Primary Bootloader (PBL) of Qualcomm Snapdragon chips (MDM and MSM series), triggered by processing a crafted ELF file during Sahara protocol handshake in Emergency Download Mode. An attacker with physical access can bypass secure boot...

PT-2026-96775

Name of the Vulnerable Software and Affected Versions radare2 versions prior to 6.2.0 Description The ELF parser in radare2 incorrectly handles PN XNUM, which is a special value used in ELF files to indicate that the number of program headers is stored elsewhere. The software allocates the...

CVE-2026-81879: Out-of-bounds Read

radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's ELF PNXNUM handling was vulnerable because the ELF parser allocated the program-header array using the resolved PNXNUM count but several consumers still iterated with the original ephnum value...

CVE-2026-25262: Write-what-where Condition

Memory corruption while processing a crafted ELF file in the Primary Bootloader...

SUSE-SU-2026:23849-1 Security update for gdb

This update for gdb fixes the following issue: - CVE-2026-13732: out-of-bounds write in STABS parser readmemberfunctions via crafted ELF bsc1277757...

OPENSUSE-SU-2026:21890-1 Security update for gdb

This update for gdb fixes the following issue: - CVE-2026-13732: out-of-bounds write in STABS parser readmemberfunctions via crafted ELF bsc1277757...

CVE-2026-44778

Inspektor Gadget is a set of tools and framework for data collection and system inspection on Kubernetes clusters and Linux hosts using eBPF. From 0.28.0 until 0.53.1, the USDT note parser in pkg/uprobetracer/usdt.go can allow an unprivileged container to crash or exhaust the memory of the...

CVE-2026-44778

Inspektor Gadget (v0.28.0–0.53.1) is an eBPF-based toolset for system inspection on Kubernetes and Linux hosts. The USDT note parser in pkg/uprobetracer/usdt.go lets an unprivileged container crash or OOM-kill the privileged IG process via a crafted ELF. Three defects contribute: getUsdtInfo() do...

CVE-2026-44778 Inspektor Gadget: Unprivileged container can crash USDT note parser via crafted ELF

Inspektor Gadget is a set of tools and framework for data collection and system inspection on Kubernetes clusters and Linux hosts using eBPF. From 0.28.0 until 0.53.1, the USDT note parser in pkg/uprobetracer/usdt.go can allow an unprivileged container to crash or exhaust the memory of the...

CVE-2026-44778 Inspektor Gadget: Unprivileged container can crash USDT note parser via crafted ELF

Inspektor Gadget is a set of tools and framework for data collection and system inspection on Kubernetes clusters and Linux hosts using eBPF. From 0.28.0 until 0.53.1, the USDT note parser in pkg/uprobetracer/usdt.go can allow an unprivileged container to crash or exhaust the memory of the...

CVE-2026-44778 Inspektor Gadget: Unprivileged container can crash USDT note parser via crafted ELF

Inspektor Gadget is a set of tools and framework for data collection and system inspection on Kubernetes clusters and Linux hosts using eBPF. From 0.28.0 until 0.53.1, the USDT note parser in pkg/uprobetracer/usdt.go can allow an unprivileged container to crash or exhaust the memory of the...

NULL Pointer Dereference

Overview Affected versions of this package are vulnerable to NULL Pointer Dereference in the elfx8664commonsectionindex function of the ELF Section Handler component. An attacker can cause a denial of service by triggering a null pointer dereference through local access. Remediation A fix was...

DEBIAN-CVE-2026-91781

A security vulnerability has been detected in GNU Binutils 2.47. Affected is the function elfx8664commonsectionindex of the file bfd/elf64-x86-64.c of the component ELF Section Handler. The manipulation leads to null pointer dereference. The attack needs to be performed locally. The exploit has...

AZL-103368 CVE-2026-91781 affecting package binutils 2.41-13

A security vulnerability has been detected in GNU Binutils 2.47. Affected is the function elfx8664commonsectionindex of the file bfd/elf64-x86-64.c of the component ELF Section Handler. The manipulation leads to null pointer dereference. The attack needs to be performed locally. The exploit has...

CVE-2026-91781

A security vulnerability has been detected in GNU Binutils 2.47. Affected is the function elfx8664commonsectionindex of the file bfd/elf64-x86-64.c of the component ELF Section Handler. The manipulation leads to null pointer dereference. The attack needs to be performed locally. The exploit has...