Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2026-90831

Опубликовано: 14 сент. 2026
Источник: redhat
CVSS3: 6.6
EPSS Низкий

Описание

A flaw was found in GNU Binutils. This vulnerability allows a local attacker to cause memory corruption by manipulating the ELF String Table component, specifically through the _bfd_elf_strtab_delref function. This could lead to unexpected behavior or system instability.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Hardened ImagesbinutilsAffected

Показывать по

Дополнительная информация

Статус:

Moderate
Дефект:
CWE-787
https://bugzilla.redhat.com/show_bug.cgi?id=2533541binutils: GNU Binutils: Memory corruption via local manipulation of ELF String Table

EPSS

Процентиль: 5%
0.00152
Низкий

6.6 Medium

CVSS3

Связанные уязвимости

CVSS3: 5.3
ubuntu
2 дня назад

A vulnerability was detected in GNU Binutils 2.47. The affected element is the function _bfd_elf_strtab_delref of the file bfd/elf-strtab.c of the component ELF String Table. The manipulation results in memory corruption. The attack requires a local approach. The exploit is now public and may be used. The project was informed of the problem early through a bug report but has not responded yet.

CVSS3: 5.3
nvd
2 дня назад

A vulnerability was detected in GNU Binutils 2.47. The affected element is the function _bfd_elf_strtab_delref of the file bfd/elf-strtab.c of the component ELF String Table. The manipulation results in memory corruption. The attack requires a local approach. The exploit is now public and may be used. The project was informed of the problem early through a bug report but has not responded yet.

CVSS3: 5.3
debian
2 дня назад

A vulnerability was detected in GNU Binutils 2.47. The affected elemen ...

CVSS3: 5.3
github
2 дня назад

A vulnerability was detected in GNU Binutils 2.47. The affected element is the function _bfd_elf_strtab_delref of the file bfd/elf-strtab.c of the component ELF String Table. The manipulation results in memory corruption. The attack requires a local approach. The exploit is now public and may be used. The project was informed of the problem early through a bug report but has not responded yet.

EPSS

Процентиль: 5%
0.00152
Низкий

6.6 Medium

CVSS3