CVE-2026-91779
Undergoing Analysis Undergoing Analysis - In Progress

Null Pointer Dereference in GNU Binutils

Publication date: 2026-09-15

Last updated on: 2026-09-15

Assigner: VulDB

Description
A security flaw has been discovered in GNU Binutils 2.47. This affects the function _bfd_elf_eh_frame_section_offset of the file bfd/elf-eh-frame.c of the component Eh Frame Handler. Performing a manipulation results in null pointer dereference. The attack must be initiated from a local position. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through a bug report but has not responded yet.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-15
Last Modified
2026-09-15
Generated
2026-10-05
AI Q&A
2026-09-15
EPSS Evaluated
2026-10-04
NVD
CVE-2026-91779
EUVD
EUVD-2026-78325

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
gnu binutils 2.47
gnu binutils 2.47.50.20260722

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-404 The product does not release or incorrectly releases a resource before it is made available for re-use.
CWE-476 The product dereferences a pointer that it expects to be valid but is NULL.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-91779 is a NULL pointer dereference vulnerability in GNU Binutils 2.47. It occurs in the _bfd_elf_eh_frame_section_offset function when processing malformed .eh_frame sections during relocatable linking (ld -r). This causes the linker to crash due to a read access near address 0x00000000000a, leading to a denial of service.

Detection Guidance

Detecting this vulnerability requires checking for crashes in GNU Binutils ld during relocatable linking of .eh_frame sections. Monitor for linker crashes when running ld -r on object files. Check system logs for segmentation faults or null pointer dereference errors in binutils processes.

Impact Analysis

This vulnerability allows a local attacker to crash the GNU Binutils linker (ld) by providing a malformed .eh_frame section. This results in a denial of service, preventing normal use of the linker for relocatable linking operations.

Compliance Impact

This vulnerability causes a denial of service by crashing the linker during relocatable linking of malformed .eh_frame sections. It does not directly impact data confidentiality or integrity but may disrupt system availability, which could indirectly affect compliance with standards like GDPR or HIPAA that require timely access to data and systems.

Mitigation Strategies

Avoid running ld -r on untrusted input files. Do not process malformed .eh_frame sections from untrusted sources. Wait for an upstream patch from GNU Binutils to address the NULL pointer dereference issue in _bfd_elf_eh_frame_section_offset.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-91779. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart