Logo
›
›vulnerability›CVE-2026-91782
Name
CVE-2026-91782
Source
NVD ( link)Debian ( link)
Description
A vulnerability was detected in GNU Binutils 2.47. Affected by this vulnerability is the function elf_x86_allocate_dynrelocs of the file bfd/elfxx-x86.c of the component Dynamic Relocation Allocation. The manipulation results in null pointer dereference. The attack requires a local approach. The exploit is now public and may be used. Upgrading to version 2.48 addresses this issue. The patch is identified as d1268210b6f6/471130b39c0/283d3198bed/0a84e560216/a692a633d40. Upgrading the affected component is recommended.
Published Date
Updated Date
Workaround
-

Analysis#


Affected Component
Analysis
binutils
Exploitable

Vulnerability Ratings#


1.9
CVSSv4
3.3
CVSSv31
1.7
CVSSv2
NaN
other

Others affected components#


Name
Project
Project Version
Version
Status
buildroot
2025.02.x
2.43.1
Not Affected
buildroot
master
2.46.1
Not Affected
openwrt
master
2.46.0-r1
Not Affected
openwrt
openwrt-25.12
2.45.1-r1
Not Affected
yocto
kirkstone
2.38
Not Affected
yocto
scarthgap
2.42
Not Affected