Skip to content
OpenAdvisories
Medium WID-SEC-2026-3364 10 CVEs

binutils: Mehrere Schwachstellen

Published Sep 14, 2026 · Updated Sep 14, 2026 · de-DE

Platform: Linux

Summary

Ein lokaler Angreifer kann mehrere Schwachstellen in binutils ausnutzen, um einen Denial of Service Angriff durchzuführen und um Informationen offenzulegen.

Product

Die GNU Binary Utilities sind eine Sammlung von Programmierwerkzeugen für die Erzeugung und Manipulation von Programmen, Objektcode, Bibliotheken, Assemblersprache sowie Quellcode in verschiedenen Dateiformaten.

Vulnerabilities 10

  • Medium 5.3
    CVE-2026-90801

    GNU Binutils ld cache.c cache_bwrite buffer overflow

    A security flaw has been discovered in GNU Binutils 2.47. This impacts the function cache_bwrite of the file bfd/cache.c of the component ld. The manipulation of the argument nbytes results in buffer overflow. The attack requires a local approach. The exploit…

    GNU Binutils binutils binutils Debian Ubuntu Azure Linux Wolfi
  • Medium 5.3
    CVE-2026-90803

    GNU Binutils ld elf64-x86-64.c elf_x86_64_relocate_section buffer overflow

    A security vulnerability has been detected in GNU Binutils 2.47. Affected by this vulnerability is the function elf_x86_64_relocate_section of the file bfd/elf64-x86-64.c of the component ld. Such manipulation of the argument roff leads to buffer overflow. An…

    GNU Binutils binutils binutils Debian Ubuntu Wolfi
  • Medium 5.3
    CVE-2026-90828

    GNU Binutils ELF Orphan Section ldelf.c elf_orphan_compatible null pointer dereference

    A security flaw has been discovered in GNU Binutils 2.47. This vulnerability affects the function elf_orphan_compatible of the file ld/ldelf.c of the component ELF Orphan Section Handler. Performing a manipulation results in null pointer dereference. The atta…

    GNU Binutils binutils binutils Debian Ubuntu Wolfi
  • Medium 5.3
    CVE-2026-90829

    GNU Binutils SHT_GROUP Section elf.c bfd_elf_set_group_contents null pointer dereference

    A weakness has been identified in GNU Binutils 2.47. This issue affects the function bfd_elf_set_group_contents of the file bfd/elf.c of the component SHT_GROUP Section Handler. Executing a manipulation can lead to null pointer dereference. The attack needs t…

    GNU Binutils binutils binutils Debian Ubuntu Wolfi
  • Medium 5.3
    CVE-2026-90830

    GNU Binutils Section Merge merge.c _bfd_write_merged_section null pointer dereference

    A security vulnerability has been detected in GNU Binutils 2.47. Impacted is the function _bfd_write_merged_section of the file bfd/merge.c of the component Section Merge. The manipulation leads to null pointer dereference. The attack needs to be performed lo…

    GNU Binutils binutils binutils Debian Ubuntu Wolfi
  • Medium 5.3
    CVE-2026-90831

    GNU Binutils ELF String Table elf-strtab.c _bfd_elf_strtab_delref memory corruption

    A vulnerability was detected in GNU Binutils 2.47. The affected element is the function _bfd_elf_strtab_delref of the file bfd/elf-strtab.c of the component ELF String Table. The manipulation results in memory corruption. The attack requires a local approach.…

    GNU Binutils binutils binutils Debian Ubuntu Azure Linux Wolfi
  • Medium 4.8
    CVE-2026-90804

    GNU Binutils Eh Frame Section elf-eh-frame.c _bfd_elf_write_section_eh_frame buffer overflow

    A vulnerability was detected in GNU Binutils 2.47. Affected by this issue is the function _bfd_elf_write_section_eh_frame of the file bfd/elf-eh-frame.c of the component Eh Frame Section Handler. Performing a manipulation of the argument cie_length/fde_length…

    GNU Binutils binutils binutils Debian Ubuntu Wolfi
  • Medium 4.4
    CVE-2026-90802

    GNU Binutils ld libbfd.c bfd_putl64 null pointer dereference

    A weakness has been identified in GNU Binutils 2.47. Affected is the function bfd_putl64 of the file bfd/libbfd.c of the component ld. This manipulation causes null pointer dereference. The attack requires local access. The exploit has been made available to …

    GNU Binutils binutils binutils Debian Ubuntu Wolfi
  • Low 3.3
    CVE-2026-91779

    GNU Binutils Eh Frame elf-eh-frame.c _bfd_elf_eh_frame_section_offset null pointer dereference

    A security flaw has been discovered in GNU Binutils 2.47. This affects the function _bfd_elf_eh_frame_section_offset of the file bfd/elf-eh-frame.c of the component Eh Frame Handler. Performing a manipulation results in null pointer dereference. The attack mu…

    GNU Binutils binutils binutils Debian Ubuntu Azure Linux Wolfi
  • Low 3.3
    CVE-2026-91780

    GNU Binutils elflink.c elf_link_add_object_symbols null pointer dereference

    A weakness has been identified in GNU Binutils 2.47. This impacts the function elf_link_add_object_symbols of the file bfd/elflink.c. Executing a manipulation can lead to null pointer dereference. The attack needs to be launched locally. The exploit has been …

    GNU Binutils binutils binutils Debian Ubuntu Azure Linux Wolfi

Revision history

  1. #1

    Initiale Fassung

References