CVE-2026-90804

Description

A vulnerability was detected in GNU Binutils 2.47. Affected by this issue is the function _bfd_elf_write_section_eh_frame of the file bfd/elf-eh-frame.c of the component Eh Frame Section Handler. Performing a manipulation of the argument cie_length/fde_length/augmentation_data_size/write_offset results in buffer overflow. Attacking locally is a requirement. The exploit is now public and may be used. The project was informed of the problem early through a bug report but has not responded yet.

Weakness classification

• cna@vuldb.com: CWE-119

Primary references

• cna@vuldb.com — Exploit, Mitigation, Third Party Advisory
• cna@vuldb.com — Exploit, Third Party Advisory
• cna@vuldb.com — Third Party Advisory, VDB Entry
• cna@vuldb.com — Exploit, Third Party Advisory, VDB Entry
• cna@vuldb.com — Permissions Required, Third Party Advisory, VDB Entry
• cna@vuldb.com — Permissions Required, Third Party Advisory, VDB Entry
• cna@vuldb.com — Product