CVE-2026-90803
Received Received - Intake

Heap Buffer Overflow in GNU Binutils

Publication date: 2026-09-14

Last updated on: 2026-09-14

Assigner: VulDB

Description
A security vulnerability has been detected in GNU Binutils 2.47. Affected by this vulnerability is the function elf_x86_64_relocate_section of the file bfd/elf64-x86-64.c of the component ld. Such manipulation of the argument roff leads to buffer overflow. An attack has to be approached locally. The exploit has been disclosed publicly and may be used. Upgrading to version 2.48 addresses this issue. The name of the patch is 471130b39c03623ec6d78ece377ff4da3f6bfe7b. It is recommended to upgrade the affected component.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-14
Last Modified
2026-09-14
Generated
2026-09-14
AI Q&A
2026-09-14
EPSS Evaluated
N/A
NVD
CVE-2026-90803
EUVD
EUVD-2026-77633

Affected Vendors & Products

Showing 3 associated CPEs
Vendor Product Version / Range
gnu binutils to 2.48 (inc)
gnu binutils to 2.48 (exc)
gnu binutils 2.48

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-119 The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.
CWE-120 The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is a buffer overflow in GNU Binutils 2.47 affecting the elf_x86_64_relocate_section function in the bfd/elf64-x86-64.c component of the ld program. It occurs due to improper handling of the roff argument, allowing local attackers to trigger a buffer overflow.

Detection Guidance

To detect this vulnerability, check the version of GNU Binutils installed on your system. Run 'ld --version' or 'binutils --version' to verify if it is version 2.47 or earlier. If so, the system is vulnerable. Additionally, monitor for crashes or heap corruption errors during linking operations, especially when processing untrusted object files.

Impact Analysis

An attacker could exploit this to execute arbitrary code or cause a denial of service on the affected system. Since the exploit is publicly disclosed, the risk of attack is higher. Upgrading to Binutils 2.48 mitigates this issue.

Compliance Impact

This vulnerability could impact compliance with GDPR and HIPAA by enabling heap out-of-bounds read/write and segmentation faults in GNU Binutils. If exploited, it may allow unauthorized memory access, potentially leading to data leaks or corruption. Systems handling sensitive data under these regulations could face violations if the linker runs with elevated privileges, risking build artifact poisoning or downstream compromise.

Mitigation Strategies

Upgrade GNU Binutils to version 2.48 or later immediately. Avoid using flags like '--gc-sections', '-w', or '--version-exports-section' on untrusted object files. Audit object-file sources in build systems and run linking steps in sandboxed environments to limit exposure.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-90803. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart