A security flaw has been discovered in GNU Binutils 2.47. This affects the function _bfd_elf_eh_frame_section_offset of the file bfd/elf-eh-frame.c of the component Eh Frame Handler. Performing a manipulation results in null pointer dereference. The attack must be initiated from a local position. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through a bug report but has not responded yet.
References
| Link | Resource |
|---|---|
| https://github.com/Ech06/CVE_submit/blob/main/bugzilla/issues/34446.md | Third Party Advisory |
| https://sourceware.org/bugzilla/show_bug.cgi?id=34446 | Third Party Advisory |
| https://vuldb.com/cve/CVE-2026-91779 | Third Party Advisory |
| https://vuldb.com/submit/933333 | Third Party Advisory |
| https://vuldb.com/vuln/404050 | Third Party Advisory |
| https://vuldb.com/vuln/404050/cti | Permissions Required |
| https://www.gnu.org/ | Product |
Configurations
History
16 Sep 2026, 15:28
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:gnu:binutils:2.47:*:*:*:*:*:*:* | |
| First Time |
Gnu
Gnu binutils |
|
| References | () https://github.com/Ech06/CVE_submit/blob/main/bugzilla/issues/34446.md - Third Party Advisory | |
| References | () https://sourceware.org/bugzilla/show_bug.cgi?id=34446 - Third Party Advisory | |
| References | () https://vuldb.com/cve/CVE-2026-91779 - Third Party Advisory | |
| References | () https://vuldb.com/submit/933333 - Third Party Advisory | |
| References | () https://vuldb.com/vuln/404050 - Third Party Advisory | |
| References | () https://vuldb.com/vuln/404050/cti - Permissions Required | |
| References | () https://www.gnu.org/ - Product |
Information
Published : 2026-09-15 09:16
Updated : 2026-09-16 15:28
NVD link : CVE-2026-91779
Mitre link : CVE-2026-91779
CVE.ORG link : CVE-2026-91779
JSON object : View
Products Affected
gnu
- binutils