CVE-2026-90831

A vulnerability was detected in GNU Binutils 2.47. The affected element is the function _bfd_elf_strtab_delref of the file bfd/elf-strtab.c of the component ELF String Table. The manipulation results in memory corruption. The attack requires a local approach. The exploit is now public and may be used. The project was informed of the problem early through a bug report but has not responded yet.

Score

CVSS 3.1 5.3 Medium

Status

Analyzed - cna@vuldb.com

Published

2026-09-14

Last modified

2026-09-16

Weaknesses

CWE-119

Affected products

• Binutils (Gnu)

References

• https://sourceware.org/bugzilla/attachment.cgi?id=16886
• https://sourceware.org/bugzilla/show_bug.cgi?id=34454
• https://vuldb.com/cve/CVE-2026-90831
• https://vuldb.com/submit/925230
• https://vuldb.com/vuln/403333
• https://vuldb.com/vuln/403333/cti
• https://www.gnu.org/