PT-2026-91754

A weakness has been identified in GNU Binutils 2.47. This issue affects the function bfd elf set group contents of the file bfd/elf.c of the component SHT GROUP Section Handler. Executing a manipulation can lead to null pointer dereference. The attack needs to be launched locally. The exploit has...

PT-2026-91762

A vulnerability was detected in GNU Binutils 2.47. The affected element is the function bfd elf strtab delref of the file bfd/elf-strtab.c of the component ELF String Table. The manipulation results in memory corruption. The attack requires a local approach. The exploit is now public and may be...

PT-2026-91753

Name of the Vulnerable Software and Affected Versions GNU Binutils version 2.47 Description A flaw in the ELF Orphan Section Handler component allows a local attacker to cause a null pointer dereference, which occurs when the system attempts to read or write to a memory address that is null,...

Linux Distros Unpatched Vulnerability : CVE-2026-90804

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was detected in GNU Binutils 2.47. Affected by this issue is the function bfdelfwritesectionehframe of the file bfd/elf-eh-frame.c of the...

PT-2026-91274

A security vulnerability has been detected in GNU Binutils 2.47. Affected by this vulnerability is the function elf x86 64 relocate section of the file bfd/elf64-x86-64.c of the component ld. Such manipulation of the argument roff leads to buffer overflow. An attack has to be approached locally...

CVE-2026-90804: Buffer Copy without Checking Size of Input

A vulnerability was detected in GNU Binutils 2.47. Affected by this issue is the function bfdelfwritesectionehframe of the file bfd/elf-eh-frame.c of the component Eh Frame Section Handler. Performing a manipulation of the argument cielength/fdelength/augmentationdatasize/writeoffset results in...

CVE-2026-90803: Buffer Copy without Checking Size of Input

A security vulnerability has been detected in GNU Binutils 2.47. Affected by this vulnerability is the function elfx8664relocatesection of the file bfd/elf64-x86-64.c of the component ld. Such manipulation of the argument roff leads to buffer overflow. An attack has to be approached locally. The...

CVE-2026-90802: NULL Pointer Dereference

A weakness has been identified in GNU Binutils 2.47. Affected is the function bfdputl64 of the file bfd/libbfd.c of the component ld. This manipulation causes null pointer dereference. The attack requires local access. The exploit has been made available to the public and could be used for attack...

CVE-2026-90801: Buffer Copy without Checking Size of Input

A security flaw has been discovered in GNU Binutils 2.47. This impacts the function cachebwrite of the file bfd/cache.c of the component ld. The manipulation of the argument nbytes results in buffer overflow. The attack requires a local approach. The exploit has been released to the public and ma...

CVE-2026-90830: NULL Pointer Dereference

A security vulnerability has been detected in GNU Binutils 2.47. Impacted is the function bfdwritemergedsection of the file bfd/merge.c of the component Section Merge. The manipulation leads to null pointer dereference. The attack needs to be performed locally. The exploit has been disclosed...

CVE-2026-19542: Stack-based Buffer Overflow

Calling tdelete on a sufficiently deep tree in the GNU C Library version 2.1 to 2.44 may write one pointer past the end of an alloca-allocated array on the stack, which may crash the application. The tdelete implementation keeps an explicit stack of parent nodes for rebalancing, which is grown as...

PT-2026-91272

A security flaw has been discovered in GNU Binutils 2.47. This impacts the function cache bwrite of the file bfd/cache.c of the component ld. The manipulation of the argument nbytes results in buffer overflow. The attack requires a local approach. The exploit has been released to the public and m...

PT-2026-91761

A security vulnerability has been detected in GNU Binutils 2.47. Impacted is the function bfd write merged section of the file bfd/merge.c of the component Section Merge. The manipulation leads to null pointer dereference. The attack needs to be performed locally. The exploit has been disclosed...

PT-2026-91040

Name of the Vulnerable Software and Affected Versions GNU libredwg version 0.13.4 Description A security flaw in the Layer Encoding component exists within the DWG TABLE function of the src/dwg.spec file. A local manipulation can lead to a null pointer dereference, which occurs when raw zeroing...

Linux Distros Unpatched Vulnerability : CVE-2026-90802

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A weakness has been identified in GNU Binutils 2.47. Affected is the function bfdputl64 of the file bfd/libbfd.c of the component ld. This manipulation causes...

CVE-2026-90831: Improper Restriction of Operations within the Bounds of a Memory Buffer

A vulnerability was detected in GNU Binutils 2.47. The affected element is the function bfdelfstrtabdelref of the file bfd/elf-strtab.c of the component ELF String Table. The manipulation results in memory corruption. The attack requires a local approach. The exploit is now public and may be used...

Linux Distros Unpatched Vulnerability : CVE-2026-90801

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A security flaw has been discovered in GNU Binutils 2.47. This impacts the function cachebwrite of the file bfd/cache.c of the component ld. The manipulation of...

Linux Distros Unpatched Vulnerability : CVE-2026-90803

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A security vulnerability has been detected in GNU Binutils 2.47. Affected by this vulnerability is the function elfx8664relocatesection of the file...

CVE-2026-90828: NULL Pointer Dereference

A security flaw has been discovered in GNU Binutils 2.47. This vulnerability affects the function elforphancompatible of the file ld/ldelf.c of the component ELF Orphan Section Handler. Performing a manipulation results in null pointer dereference. The attack must be initiated from a local...

Amazon Linux 2023 : emacs, emacs-common, emacs-devel (ALAS2023-2026-2147)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-2147 advisory. GNU Emacs before 31.0.91 contains an integer overflow in the PBM/PPM/PGM image loader that allows an attacker to leak heap memory contents by supplying a crafted image with large dimensions an...