CVE-2026-91780
published 2026-09-15CVE-2026-91780: A weakness has been identified in GNU Binutils 2.47. This impacts the function elf_link_add_object_symbols of the file bfd/elflink.c. Executing a manipulation…
PriorityP412low3.3CVSS 3.1
AVLACLPRLUINSUCNINAL
EPSS
0.17%
6.0th percentile
A weakness has been identified in GNU Binutils 2.47. This impacts the function elf_link_add_object_symbols of the file bfd/elflink.c. Executing a manipulation can lead to null pointer dereference. The attack needs to be launched locally. The exploit has been made available to the public and could be used for attacks. The project was informed of the problem early through a bug report but has not responded yet.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| gnu | binutils | — | — |
| gnu | binutils | — | — |
CVSS provenance
nvdv3.13.3LOWCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
nvdv4.01.9LOWCVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
nvdv2.01.7LOWAV:L/AC:L/Au:S/C:N/I:N/A:P
vendor_redhat3.3LOW
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
binutils: GNU Binutils: Local denial of service via null pointer dereference
vendor_redhat·2026-09-15·CVSS 3.3
CVE-2026-91780 [LOW] CWE-476 binutils: GNU Binutils: Local denial of service via null pointer dereference
binutils: GNU Binutils: Local denial of service via null pointer dereference
A weakness has been identified in GNU Binutils 2.47. This impacts the function elf_link_add_object_symbols of the file bfd/elflink.c. Executing a manipulation can lead to null pointer dereference. The attack needs to be launched locally. The exploit has been made available to the public and could be used for attacks. The project was informed of the problem early through a bug report but has not responded yet.
A flaw was found in GNU Binutils. A local attacker can trigger a null pointer dereference by manipulating input to the 'elf_link_add_object_symbols' function. This can lead to a denial of service (DoS) condition, making the affected component unavailable.
Package: binutils (Red Hat Hardened Images) - Affec
GHSA
A weakness has been identified in GNU Binutils 2.47.
ghsa_unreviewed·2026-09-15
CVE-2026-91780 [LOW] CWE-404 A weakness has been identified in GNU Binutils 2.47.
A weakness has been identified in GNU Binutils 2.47. This impacts the function elf_link_add_object_symbols of the file bfd/elflink.c. Executing a manipulation can lead to null pointer dereference. The attack needs to be launched locally. The exploit has been made available to the public and could be used for attacks. The project was informed of the problem early through a bug report but has not responded yet.
No detection rules found.
No public exploits indexed.
https://github.com/Ech06/CVE_submit/tree/main/bugzilla/pocs/34447https://sourceware.org/bugzilla/show_bug.cgi?id=34447https://vuldb.com/cve/CVE-2026-91780https://vuldb.com/submit/933334https://vuldb.com/vuln/404051https://vuldb.com/vuln/404051/ctihttps://www.gnu.org/https://sourceware.org/bugzilla/show_bug.cgi?id=34447https://vuldb.com/submit/933334
2026-09-15
Published