Description
A security flaw has been discovered in GNU Binutils 2.47. This impacts the function cache_bwrite of the file bfd/cache.c of the component ld. The manipulation of the argument nbytes results in buffer overflow. The attack requires a local approach. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through a bug report but has not responded yet.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
GNU Binutils
2.47affected
References
- https://vuldb.com/vuln/403303 ↗
- https://vuldb.com/vuln/403303/cti ↗
- https://vuldb.com/cve/CVE-2026-90801 ↗
- https://vuldb.com/submit/920276 ↗
- https://sourceware.org/bugzilla/show_bug.cgi?id=34442 ↗
- https://github.com/r1ck9-2q/cve_summit/blob/main/Heap-buffer-overflow%20in%20%60cache_bwrite%60%20(bfdcache.c436)%20via%20malformed%20ELF%20with%20%60--gc-sections%20-w%60.md ↗
- https://www.gnu.org/ ↗