redhat/binutils vulnerabilities

Latest redhat/binutils CVEs

Newest publication first · page 1 of 2

1. CVE-2026-90831 GNU Binutils ELF String Table elf-strtab.c _bfd_elf_strtab_delref memory corruption

   Published 2026-09-14

   Medium·CVSS 4.8 EPSS 0.17%

   A vulnerability was detected in GNU Binutils 2.47. The affected element is the function _bfd_elf_strtab_delref of the file bfd/elf-strtab.c of the component ELF String Table. The manipulation results in memory corruption. The attack requires a local approach. The exploit is now p...

2. CVE-2026-90830 GNU Binutils Section Merge merge.c _bfd_write_merged_section null pointer dereference

   Published 2026-09-14

   Medium·CVSS 4.8 EPSS 0.17%

   A security vulnerability has been detected in GNU Binutils 2.47. Impacted is the function _bfd_write_merged_section of the file bfd/merge.c of the component Section Merge. The manipulation leads to null pointer dereference. The attack needs to be performed locally. The exploit ha...

3. CVE-2026-90829 GNU Binutils SHT_GROUP Section elf.c bfd_elf_set_group_contents null pointer dereference

   Published 2026-09-14

   Medium·CVSS 4.8 EPSS 0.17%

   A weakness has been identified in GNU Binutils 2.47. This issue affects the function bfd_elf_set_group_contents of the file bfd/elf.c of the component SHT_GROUP Section Handler. Executing a manipulation can lead to null pointer dereference. The attack needs to be launched locally...

4. CVE-2026-90828 GNU Binutils ELF Orphan Section ldelf.c elf_orphan_compatible null pointer dereference

   Published 2026-09-14

   Medium·CVSS 4.8 EPSS 0.17%

   A security flaw has been discovered in GNU Binutils 2.47. This vulnerability affects the function elf_orphan_compatible of the file ld/ldelf.c of the component ELF Orphan Section Handler. Performing a manipulation results in null pointer dereference. The attack must be initiated...

5. CVE-2026-90804 GNU Binutils Eh Frame Section elf-eh-frame.c _bfd_elf_write_section_eh_frame buffer overflow

   Published 2026-09-14

   Low·CVSS 2.4 EPSS 0.20%

   A vulnerability was detected in GNU Binutils 2.47. Affected by this issue is the function _bfd_elf_write_section_eh_frame of the file bfd/elf-eh-frame.c of the component Eh Frame Section Handler. Performing a manipulation of the argument cie_length/fde_length/augmentation_data_si...

6. CVE-2026-90803 GNU Binutils ld elf64-x86-64.c elf_x86_64_relocate_section buffer overflow

   Published 2026-09-14

   Medium·CVSS 4.8 EPSS 0.20%

   A security vulnerability has been detected in GNU Binutils 2.47. Affected by this vulnerability is the function elf_x86_64_relocate_section of the file bfd/elf64-x86-64.c of the component ld. Such manipulation of the argument roff leads to buffer overflow. An attack has to be app...

7. CVE-2026-90802 GNU Binutils ld libbfd.c bfd_putl64 null pointer dereference

   Published 2026-09-14

   Medium·CVSS 4.8 EPSS 0.18%

   A weakness has been identified in GNU Binutils 2.47. Affected is the function bfd_putl64 of the file bfd/libbfd.c of the component ld. This manipulation causes null pointer dereference. The attack requires local access. The exploit has been made available to the public and could...

8. CVE-2026-90801 GNU Binutils ld cache.c cache_bwrite buffer overflow

   Published 2026-09-14

   Medium·CVSS 4.8 EPSS 0.21%

   A security flaw has been discovered in GNU Binutils 2.47. This impacts the function cache_bwrite of the file bfd/cache.c of the component ld. The manipulation of the argument nbytes results in buffer overflow. The attack requires a local approach. The exploit has been released to...

9. CVE-2026-19548 Binutils: binutils: multiple use-after-free in add_archive_element via lto plugin processing

   Published 2026-08-12

   Medium·CVSS 5.5 EPSS 0.17%

   Multiple Use-After-Free vulnerabilities were found in the add_archive_element function in ld/ldmain.c of the GNU linker (ld), a component of binutils. The root cause is that plugin_maybe_claim() in ld/plugin.c frees the original BFD object via bfd_close/_bfd_delete_bfd when entry...

10. CVE-2026-18220 Binutils: binutils: out-of-bounds write in bfd dlx elf backend relocation processing

    Published 2026-07-29

    High·CVSS 7.8 EPSS 0.19%

    An out-of-bounds write vulnerability was found in the BFD library's DLX ELF backend (bfd/elf32-dlx.c) in GNU binutils. The dlx_rtype_to_howto() function maps ELF relocation types to internal howto structures but fails to perform adequate bounds checking on attacker-controlled rel...

11. CVE-2026-15003 Binutils: gnu binutils: heap-buffer-overflow in linker leads to information disclosure and denial of service

    Published 2026-07-27

    Medium·CVSS 5.6 EPSS 0.15%

    A flaw was found in the GNU Binutils (Binary Utilities) linker. This vulnerability, a heap-buffer-overflow read (CWE-125), occurs when the linker processes a specially crafted 32-bit XCOFF (Extended Common Object File Format) object file. An attacker could exploit this by providi...

12. CVE-2026-6846 Binutils: binutils: arbitrary code execution via malformed xcoff object file processing

    Published 2026-04-22

    High·CVSS 7.8 EPSS 0.17%

    A flaw was found in binutils. A heap-buffer-overflow vulnerability exists when processing a specially crafted XCOFF (Extended Common Object File Format) object file during linking. A local attacker could trick a user into processing this malicious file, which could lead to arbitr...

13. CVE-2026-6844 Binutils: binutils: denial of service vulnerabilities in readelf via crafted elf files

    Published 2026-04-22

    Medium·CVSS 5.5 EPSS 0.10%

    A flaw was found in the readelf utility of the binutils package. A local attacker could exploit two Denial of Service (DoS) vulnerabilities by providing a specially crafted Executable and Linkable Format (ELF) file. One vulnerability, a resource exhaustion (CWE-400), can lead to...

14. CVE-2026-6845 Binutils: binutils: denial of service via crafted elf file

    Published 2026-04-22

    Medium·CVSS 5.0 EPSS 0.15%

    A flaw was found in binutils, specifically within the readelf utility. This vulnerability allows a local attacker to cause a Denial of Service (DoS) by tricking a user into processing a specially crafted Executable and Linkable Format (ELF) file. The exploitation of this flaw can...

15. CVE-2026-4647 Binutils: out-of-bounds read in xcoff relocation processing in gnu binutils bfd library

    Published 2026-03-23

    Medium·CVSS 6.1 EPSS 0.18%

    A flaw was found in the GNU Binutils BFD library, a widely used component for handling binary files such as object files and executables. The issue occurs when processing specially crafted XCOFF object files, where a relocation type value is not properly validated before being us...

16. CVE-2026-3441 Binutils: gnu binutils: information disclosure via specially crafted xcoff object file

    Published 2026-03-15

    High·CVSS 7.1 EPSS 0.21%

    A flaw was found in GNU Binutils. This heap-based buffer overflow vulnerability, specifically an out-of-bounds read in the bfd linker, allows an attacker to gain access to sensitive information. By convincing a user to process a specially crafted XCOFF object file, an attacker ca...

17. CVE-2026-3442 Binutils: gnu binutils: information disclosure or denial of service via out-of-bounds read in bfd linker

    Published 2026-03-15

    High·CVSS 7.1 EPSS 0.29%

    A flaw was found in GNU Binutils. This vulnerability, a heap-based buffer overflow, specifically an out-of-bounds read, exists in the bfd linker component. An attacker could exploit this by convincing a user to process a specially crafted malicious XCOFF object file. Successful e...

18. CVE-2025-69648 GNU Binutils thru 2.45.1 readelf contains a denial-of-service vulnerability when processing a crafted binary with malformed DWARF .debug_rnglists data. A logic flaw in the DWARF parsing path causes re...

    Published 2026-03-09

    Medium·CVSS 6.2 EPSS 0.20%

    GNU Binutils thru 2.45.1 readelf contains a denial-of-service vulnerability when processing a crafted binary with malformed DWARF .debug_rnglists data. A logic flaw in the DWARF parsing path causes readelf to repeatedly print the same warning message without making forward progre...

19. CVE-2025-69647 GNU Binutils thru 2.45.1 readelf contains a denial-of-service vulnerability when processing a crafted binary with malformed DWARF loclists data. A logic flaw in the DWARF parsing code can cause readel...

    Published 2026-03-09

    Medium·CVSS 6.2 EPSS 0.18%

    GNU Binutils thru 2.45.1 readelf contains a denial-of-service vulnerability when processing a crafted binary with malformed DWARF loclists data. A logic flaw in the DWARF parsing code can cause readelf to repeatedly print the same table output without making forward progress, res...

20. CVE-2025-69652 GNU Binutils thru 2.46 readelf contains a vulnerability that leads to an abort (SIGABRT) when processing a crafted ELF binary with malformed DWARF abbrev or debug information. Due to incomplete state...

    Published 2026-03-06

    Medium·CVSS 6.2 EPSS 0.20%

    GNU Binutils thru 2.46 readelf contains a vulnerability that leads to an abort (SIGABRT) when processing a crafted ELF binary with malformed DWARF abbrev or debug information. Due to incomplete state cleanup in process_debug_info(), an invalid debug_info_p state may propagate int...

21. CVE-2025-69649 GNU Binutils thru 2.46 readelf contains a null pointer dereference vulnerability when processing a crafted ELF binary with malformed header fields. During relocation processing, an invalid or null sec...

    Published 2026-03-06

    High·CVSS 7.5 EPSS 0.31%

    GNU Binutils thru 2.46 readelf contains a null pointer dereference vulnerability when processing a crafted ELF binary with malformed header fields. During relocation processing, an invalid or null section pointer may be passed into display_relocations(), resulting in a segmentati...

22. CVE-2025-69646 Binutils objdump contains a denial-of-service vulnerability when processing a crafted binary with malformed DWARF debug_rnglists data. A logic error in the handling of the debug_rnglists header can ca...

    Published 2026-03-06

    Medium·CVSS 5.5 EPSS 0.18%

    Binutils objdump contains a denial-of-service vulnerability when processing a crafted binary with malformed DWARF debug_rnglists data. A logic error in the handling of the debug_rnglists header can cause objdump to repeatedly print the same warning message and fail to terminate,...

23. CVE-2025-69645 Binutils objdump contains a denial-of-service vulnerability when processing a crafted binary with malformed DWARF debug information. A logic error in the handling of DWARF compilation units can result...

    Published 2026-03-06

    Medium·CVSS 5.5 EPSS 0.19%

    Binutils objdump contains a denial-of-service vulnerability when processing a crafted binary with malformed DWARF debug information. A logic error in the handling of DWARF compilation units can result in an invalid offset_size value being used inside byte_get_little_endian, leadi...

24. CVE-2025-69644 An issue was discovered in Binutils before 2.46. The objdump contains a denial-of-service vulnerability when processing a crafted binary with malformed debug information. A logic flaw in the handling...

    Published 2026-03-06

    Medium·CVSS 5.0 EPSS 0.14%

    An issue was discovered in Binutils before 2.46. The objdump contains a denial-of-service vulnerability when processing a crafted binary with malformed debug information. A logic flaw in the handling of DWARF location list headers can cause objdump to enter an unbounded loop and...

25. CVE-2025-66866 binutils: BinUtils: Denial of Service via crafted PE file

    Published 2025-12-29

    High·CVSS 7.5 EPSS 0.31%

    An issue was discovered in function d_abi_tags in file cp-demangle.c in BinUtils 2.26 allows attackers to cause a denial of service via crafted PE file.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.