CVE-2026-19582

In binutils 2.46.1 and earlier, the rsrc_print_name function suffers a stack buffer overflow from an untrusted PE file, enabling arbitrary code execution with HIGH severity (CVSS 7.8). No exploit code or in-the-wild activity is reported; upgrade binutils beyond 2.46.1 to remediate.

CVE-2026-19582 Binutils: stack buffer overflow in gnu binutils in rsrc_print_name from an untrusted pe file

In binutils 2.46.1 and prior versions, a victim who opens a crafted PE file using binutils could execute arbitrary code unknowningly via a stack buffer overflow out of bounds write...