Logo
›
›vulnerability›CVE-2026-90804
Name
CVE-2026-90804
Source
NVD ( link)Debian ( link)
Description
A vulnerability was detected in GNU Binutils 2.47. Affected by this issue is the function _bfd_elf_write_section_eh_frame of the file bfd/elf-eh-frame.c of the component Eh Frame Section Handler. Performing a manipulation of the argument cie_length/fde_length/augmentation_data_size/write_offset results in buffer overflow. Attacking locally is a requirement. The exploit is now public and may be used. The project was informed of the problem early through a bug report but has not responded yet.
Published Date
Updated Date
Workaround
-

Analysis#


Affected Component
Analysis

Vulnerability Ratings#


0.9
CVSSv4
4.8
CVSSv31
6.1
CVSSv31
4.3
CVSSv2
NaN
other

Others affected components#


Name
Project
Project Version
Version
Status
buildroot
2025.02.x
2.43.1
Not Affected
openwrt
master
2.46.0-r1
Not Affected
openwrt
openwrt-25.12
2.45.1-r1
Not Affected
yocto
kirkstone
2.38
Not Affected
yocto
master
2.47
Exploitable
yocto
scarthgap
2.42
Not Affected