CVE-2026-90831

MEDIUM 5.3CVE-2026-90831 · Published 14/09/2026 · updated 16/09/2026

Package	Affected versions	Patched versions
binutils gnu	`= 2.47`	No fix yet

Description

A vulnerability was detected in GNU Binutils 2.47. The affected element is the function _bfd_elf_strtab_delref of the file bfd/elf-strtab.c of the component ELF String Table. The manipulation results in memory corruption. The attack requires a local approach. The exploit is now public and may be used. The project was informed of the problem early through a bug report but has not responded yet.

References

sourceware.org/bugzilla/attachment.cgi · Third Party Advisory
sourceware.org/bugzilla/show_bug.cgi · Third Party Advisory
vuldb.com/cve/CVE-2026-90831 · Third Party Advisory
vuldb.com/submit/925230 · Third Party Advisory
vuldb.com/vuln/403333 · Third Party Advisory
vuldb.com/vuln/403333/cti · Permissions Required
gnu.org · Product

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free