CVE-2026-91779
Received Received - Intake

Null Pointer Dereference in GNU Binutils

Publication date: 2026-09-15

Last updated on: 2026-09-15

Assigner: VulDB

Description
A security flaw has been discovered in GNU Binutils 2.47. This affects the function _bfd_elf_eh_frame_section_offset of the file bfd/elf-eh-frame.c of the component Eh Frame Handler. Performing a manipulation results in null pointer dereference. The attack must be initiated from a local position. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through a bug report but has not responded yet.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-15
Last Modified
2026-09-15
Generated
2026-09-15
AI Q&A
2026-09-15
EPSS Evaluated
N/A
NVD
CVE-2026-91779
EUVD
EUVD-2026-78325

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
gnu binutils 2.47
gnu binutils 2.47.50.20260722

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-476 The product dereferences a pointer that it expects to be valid but is NULL.
CWE-404 The product does not release or incorrectly releases a resource before it is made available for re-use.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-91779 is a NULL pointer dereference vulnerability in GNU Binutils 2.47. It occurs in the _bfd_elf_eh_frame_section_offset function when processing malformed .eh_frame sections during relocatable linking (ld -r). This causes the linker to crash due to a read access near address 0x00000000000a, leading to a denial of service.

Detection Guidance

Detecting this vulnerability requires checking for crashes in GNU Binutils ld during relocatable linking of .eh_frame sections. Monitor for linker crashes when running ld -r on object files. Check system logs for segmentation faults or null pointer dereference errors in binutils processes.

Impact Analysis

This vulnerability allows a local attacker to crash the GNU Binutils linker (ld) by providing a malformed .eh_frame section. This results in a denial of service, preventing normal use of the linker for relocatable linking operations.

Mitigation Strategies

Avoid running ld -r on untrusted input files. Do not process malformed .eh_frame sections from untrusted sources. Wait for an upstream patch from GNU Binutils to address the NULL pointer dereference issue in _bfd_elf_eh_frame_section_offset.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-91779. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart