CVE-2026-90829

GNU Binutils 2.47 is affected by a null pointer dereference in the function bfd_elf_set_group_contents within the file bfd/elf.c , part of the SHT_GROUP Section Handler component. The flaw is triggered by local manipulation and results in low impact on confidentiality, integrity, and availability...

CVE-2026-90804

A buffer overflow (specifically a heap out-of-bounds write via a negative-size memmove) exists in GNU Binutils 2.47 , in the function _bfd_elf_write_section_eh_frame within bfd/elf-eh-frame.c (Eh Frame Section Handler). Triggering the flaw requires a malformed .eh_frame section and manipulation o...

CVE-2026-90830

A null pointer dereference vulnerability was identified in GNU Binutils 2.47 , specifically in the function _bfd_write_merged_section within the file bfd/merge.c (component: Section Merge). The attack requires local access with low privileges. The exploit has been publicly disclosed as a proof-of...

CVE-2026-90802

GNU Binutils 2.47 is affected by a null pointer dereference in the function bfd_putl64 within the file bfd/libbfd.c , part of the ld (linker) component. The vulnerability requires local access and carries a MEDIUM severity (CVSS 3.1 base score 4.4). A proof-of-concept exploit has been made public...

CVE-2026-90801

A buffer overflow vulnerability was identified in GNU Binutils 2.47 , specifically in the function cache_bwrite within bfd/cache.c of the ld (linker) component. Manipulation of the nbytes argument triggers the overflow. The attack vector is local , requiring low privileges and no user interaction...

CVE-2026-90803

GNU Binutils 2.47 is affected by a buffer overflow in the function elf_x86_64_relocate_section (file bfd/elf64-x86-64.c , component ld ). The vulnerability is triggered by manipulation of the argument roff via a malformed relocation , leading to heap out-of-bounds read/write and a segmentation fa...

CVE-2026-90831

A memory corruption vulnerability was identified in GNU Binutils 2.47 , specifically in the function _bfd_elf_strtab_delref within the file bfd/elf-strtab.c of the ELF String Table component. The flaw is triggered through local manipulation and can lead to partial compromise of confidentiality, i...

CVE-2026-91782

GNU Binutils 2.47 is affected by a null pointer dereference in the function elf_x86_allocate_dynrelocs within bfd/elfxx-x86.c, part of the Dynamic Relocation Allocation component. The flaw is triggered through a local attack path with low complexity and low privileges required, resulting in a lim...

CVE-2026-91780

GNU Binutils 2.47 contains a null pointer dereference in the elf_link_add_object_symbols function within bfd/elflink.c. Triggering this flaw requires a local attack with low privileges, resulting in a potential availability impact (crash/denial of service). A proof-of-concept exploit is publicly ...

CVE-2026-91779

GNU Binutils 2.47 is affected by a null pointer dereference in the function _bfd_elf_eh_frame_section_offset within the Eh Frame Handler component (bfd/elf-eh-frame.c). The flaw is exploitable via a local attack and primarily impacts availability (low severity, CVSS 3.1 base score 3.3). A proof-o...

CVE-2026-91781

A null pointer dereference in the ELF Section Handler component of GNU Binutils 2.47 , specifically in the function elf_x86_64_common_section_index within bfd/elf64-x86-64.c, allows a local attacker with low privileges to crash the application, resulting in low availability impact . The exploit i...