CVE-2026-3441
Modified Modified - Updated After Analysis

Heap-Based Buffer Overflow in GNU Binutils bfd Linker Causes Info Leak

Publication date: 2026-03-16

Last updated on: 2026-06-30

Assigner: Red Hat, Inc.

Description
A flaw was found in GNU Binutils. This heap-based buffer overflow vulnerability, specifically an out-of-bounds read in the bfd linker, allows an attacker to gain access to sensitive information. By convincing a user to process a specially crafted XCOFF object file, an attacker can trigger this flaw, potentially leading to information disclosure or an application level denial of service.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-03-16
Last Modified
2026-06-30
Generated
2026-07-06
AI Q&A
2026-03-16
EPSS Evaluated
2026-07-05
NVD
CVE-2026-3441
EUVD
EUVD-2026-12194

Affected Vendors & Products

Showing 7 associated CPEs
Vendor Product Version / Range
redhat enterprise_linux 7.0
redhat enterprise_linux 6.0
redhat enterprise_linux 8.0
redhat openshift_container_platform 4.0
redhat enterprise_linux 9.0
gnu binutils *
redhat enterprise_linux 10.0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-125 The product reads data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-3441 is a medium-severity vulnerability in GNU Binutils, specifically in the bfd linker component that handles XCOFF object files.

The flaw is a heap-based buffer overflow caused by an out-of-bounds read in the function xcoff_link_add_symbols due to improper validation of the x_scnlen value. This leads to accessing memory beyond the bounds of the csects array.

An attacker can exploit this by convincing a user to run the linker on a specially crafted malicious XCOFF object file, triggering the vulnerability.

Impact Analysis

This vulnerability can lead to information disclosure or an application-level denial of service.

By exploiting the heap-based buffer overflow, an attacker may gain access to sensitive information processed by the linker.

Additionally, the flaw can cause the application to crash or behave unexpectedly, resulting in denial of service.

Compliance Impact

I don't know

Detection Guidance

I don't know

Mitigation Strategies

I don't know

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-3441. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart