Linux Distros Unpatched Vulnerability : CVE-2026-90804

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was detected in GNU Binutils 2.47. Affected by this issue is the function bfdelfwritesectionehframe of the file bfd/elf-eh-frame.c of the...

Linux Distros Unpatched Vulnerability : CVE-2026-90802

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A weakness has been identified in GNU Binutils 2.47. Affected is the function bfdputl64 of the file bfd/libbfd.c of the component ld. This manipulation causes...

PT-2026-91761

A security vulnerability has been detected in GNU Binutils 2.47. Impacted is the function bfd write merged section of the file bfd/merge.c of the component Section Merge. The manipulation leads to null pointer dereference. The attack needs to be performed locally. The exploit has been disclosed...

CVE-2026-90831: Improper Restriction of Operations within the Bounds of a Memory Buffer

A vulnerability was detected in GNU Binutils 2.47. The affected element is the function bfdelfstrtabdelref of the file bfd/elf-strtab.c of the component ELF String Table. The manipulation results in memory corruption. The attack requires a local approach. The exploit is now public and may be used...

CVE-2026-90830: NULL Pointer Dereference

A security vulnerability has been detected in GNU Binutils 2.47. Impacted is the function bfdwritemergedsection of the file bfd/merge.c of the component Section Merge. The manipulation leads to null pointer dereference. The attack needs to be performed locally. The exploit has been disclosed...

CVE-2026-90828: NULL Pointer Dereference

A security flaw has been discovered in GNU Binutils 2.47. This vulnerability affects the function elforphancompatible of the file ld/ldelf.c of the component ELF Orphan Section Handler. Performing a manipulation results in null pointer dereference. The attack must be initiated from a local...

PT-2026-91040

Name of the Vulnerable Software and Affected Versions GNU libredwg version 0.13.4 Description A security flaw in the Layer Encoding component exists within the DWG TABLE function of the src/dwg.spec file. A local manipulation can lead to a null pointer dereference, which occurs when raw zeroing...

PT-2026-91272

A security flaw has been discovered in GNU Binutils 2.47. This impacts the function cache bwrite of the file bfd/cache.c of the component ld. The manipulation of the argument nbytes results in buffer overflow. The attack requires a local approach. The exploit has been released to the public and m...

PT-2026-91274

A security vulnerability has been detected in GNU Binutils 2.47. Affected by this vulnerability is the function elf x86 64 relocate section of the file bfd/elf64-x86-64.c of the component ld. Such manipulation of the argument roff leads to buffer overflow. An attack has to be approached locally...

CVE-2026-19542: Stack-based Buffer Overflow

Calling tdelete on a sufficiently deep tree in the GNU C Library version 2.1 to 2.44 may write one pointer past the end of an alloca-allocated array on the stack, which may crash the application. The tdelete implementation keeps an explicit stack of parent nodes for rebalancing, which is grown as...

CVE-2026-90804: Buffer Copy without Checking Size of Input

A vulnerability was detected in GNU Binutils 2.47. Affected by this issue is the function bfdelfwritesectionehframe of the file bfd/elf-eh-frame.c of the component Eh Frame Section Handler. Performing a manipulation of the argument cielength/fdelength/augmentationdatasize/writeoffset results in...

CVE-2026-90803: Buffer Copy without Checking Size of Input

A security vulnerability has been detected in GNU Binutils 2.47. Affected by this vulnerability is the function elfx8664relocatesection of the file bfd/elf64-x86-64.c of the component ld. Such manipulation of the argument roff leads to buffer overflow. An attack has to be approached locally. The...

CVE-2026-90801: Buffer Copy without Checking Size of Input

A security flaw has been discovered in GNU Binutils 2.47. This impacts the function cachebwrite of the file bfd/cache.c of the component ld. The manipulation of the argument nbytes results in buffer overflow. The attack requires a local approach. The exploit has been released to the public and ma...

CVE-2026-90802: NULL Pointer Dereference

A weakness has been identified in GNU Binutils 2.47. Affected is the function bfdputl64 of the file bfd/libbfd.c of the component ld. This manipulation causes null pointer dereference. The attack requires local access. The exploit has been made available to the public and could be used for attack...

Linux Distros Unpatched Vulnerability : CVE-2026-90803

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A security vulnerability has been detected in GNU Binutils 2.47. Affected by this vulnerability is the function elfx8664relocatesection of the file...

Linux Distros Unpatched Vulnerability : CVE-2026-90801

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A security flaw has been discovered in GNU Binutils 2.47. This impacts the function cachebwrite of the file bfd/cache.c of the component ld. The manipulation of...

PT-2026-91273

Name of the Vulnerable Software and Affected Versions GNU Binutils version 2.47 Description A null pointer dereference occurs in the ld component within the bfd putl64 function located in the bfd/libbfd.c file. This issue requires local access to be exploited. Recommendations At the moment, there...

PT-2026-91276

Name of the Vulnerable Software and Affected Versions GNU Binutils version 2.47 Description A buffer overflow occurs in the Eh Frame Section Handler component within the bfd elf write section eh frame function of the bfd/elf-eh-frame.c file. This issue is triggered by the manipulation of the cie...

CVE-2026-19499: Heap-based Buffer Overflow

Calling strfmon and strfmonl in the GNU C Library version 2.38 to 2.44 can write past the end of the caller-supplied output buffer when a conversion uses right-justified width padding. Exploitation requires an application code path that calls strfmon or strfmonl with right-justified width padding...

Amazon Linux 2023 : emacs, emacs-common, emacs-devel (ALAS2023-2026-2147)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-2147 advisory. GNU Emacs before 31.0.91 contains an integer overflow in the PBM/PPM/PGM image loader that allows an attacker to leak heap memory contents by supplying a crafted image with large dimensions an...