CVE-2026-90831

Impact

A vulnerability was detected in GNU Binutils 2.47. The affected element is the function _bfd_elf_strtab_delref of the file bfd/elf-strtab.c of the component ELF String Table. The manipulation results in memory corruption. The attack requires a local approach. The exploit is now public and may be used. The project was informed of the problem early through a bug report but has not responded yet.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• https://sourceware.org/bugzilla/attachment.cgi?id=16886
• https://sourceware.org/bugzilla/show_bug.cgi?id=34454
• https://vuldb.com/cve/CVE-2026-90831
• https://vuldb.com/submit/925230
• https://vuldb.com/vuln/403333
• https://vuldb.com/vuln/403333/cti
• https://www.gnu.org/