{"id":"CVE-2026-15003","aliases":["AZL-94187","AZL-94211","DEBIAN-CVE-2026-15003","EUVD-2026-49202","GHSA-3mxj-5hq2-2h4f","OESA-2026-3255","OESA-2026-3256","OESA-2026-3257","OESA-2026-3314","OESA-2026-3315","RHSA-2026:47171","UBUNTU-CVE-2026-15003","openSUSE-SU-2026:11932-1"],"status":"published","title":"Binutils: gnu binutils: heap-buffer-overflow in linker leads to information disclosure and denial of service","description":"A flaw was found in the GNU Binutils (Binary Utilities) linker. This vulnerability, a heap-buffer-overflow read (CWE-125), occurs when the linker processes a specially crafted 32-bit XCOFF (Extended Common Object File Format) object file. An attacker could exploit this by providing a malicious file, leading to an out-of-bounds read of memory. This can result in information disclosure, potentially revealing sensitive heap data, and a Denial of Service (DoS) due to the linker crashing.","severity":{"version":"3.1","score":5.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:H","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00151,"percentile":0.0426,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-125"],"published":"2026-07-27T13:22:21Z","modified":"2026-11-06T10:05:05Z","fixes":[{"ecosystem":"Azure Linux:3","package":"binutils","fixed_in":["2.41-13"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"gdb","fixed_in":["13.2-11"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"binutils","fixed_in":["2.47-1"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP4","package":"gdb","fixed_in":["14.1-14.oe2403sp4"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP1","package":"gdb","fixed_in":["14.1-14.oe2403sp1"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP3","package":"gdb","fixed_in":["14.1-14.oe2403sp3"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP4","package":"gdb","fixed_in":["9.2-16.oe2003sp4"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP4","package":"gdb","fixed_in":["11.1-17.oe2203sp4"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Azure Linux:3","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.41-13"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"gdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.2-11"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.40-2","2.40.50.20230111-1","2.40.50.20230215-1","2.40.50.20230501-1","2.40.50.20230510-1","2.40.50.20230602-1","2.40.50.20230611-1","2.40.50.20230611-2","2.40.50.20230622-1","2.40.50.20230625-1","2.40.50.20230630-1","2.40.90.20230705-1","2.40.90.20230714-1","2.40.90.20230714-2","2.40.90.20230720-1","2.40.90.20230729-1","2.40.90.20230729-2","2.41-1","2.41-2","2.41-3","2.41-4","2.41-5","2.41-6","2.41-7","2.41.50.20230731-1","2.41.50.20230803-1","2.41.50.20230905-1","2.41.50.20231010-1","2.41.50.20231101-1","2.41.50.20231125-1","2.41.50.20231202-1","2.41.50.20231206-1","2.41.50.20231214-1","2.41.50.20231227-1","2.41.90.20240115-1","2.41.90.20240122-1","2.42-1","2.42-2","2.42-2+hurd.1","2.42-3","2.42-4","2.42.50.20240614-1","2.42.50.20240618-1","2.42.50.20240625-1","2.42.50.20240710-1","2.42.90.20240720-1","2.42.90.20240720-2","2.43-1","2.43-2","2.43.1-1","2.43.1-2","2.43.1-3","2.43.1-4","2.43.1-5","2.43.50.20240817-1","2.43.50.20240909-1","2.43.50.20241004-1","2.43.50.20241112-1","2.43.50.20241126-1","2.43.50.20241126-2","2.43.50.20241126-3","2.43.50.20241204-1","2.43.50.20241204-2","2.43.50.20241210-1","2.43.50.20241215-1","2.43.50.20241221-1","2.43.50.20241230-1","2.43.50.20250108-1","2.43.90.20250122-1","2.43.90.20250122-2","2.43.90.20250127-1","2.43.90.20250202-1","2.44-1","2.44-2","2.44-3","2.44.50.20250201-1","2.44.50.20250207-1","2.44.50.20250218-1","2.44.50.20250218-2","2.44.50.20250309-1","2.44.50.20250405-1","2.44.50.20250502-1","2.44.50.20250520-1","2.44.50.20250528-1","2.44.50.20250707-1","2.44.90.20250719-1","2.45-1","2.45-2","2.45-3","2.45-4","2.45-5","2.45-6","2.45-7","2.45-8","2.45.50.20250813-1","2.45.50.20250903-1","2.45.50.20251005-1","2.45.50.20251023-1","2.45.50.20251023-2","2.45.50.20251122-1","2.45.50.20251125-1","2.45.50.20251201-1","2.45.50.20251209-1","2.45.50.20260116-1","2.45.50.20260119-1","2.45.90.20260125-1","2.45.90.20260201-1","2.46-1","2.46-2","2.46-3","2.46.50.20260216-1","2.46.50.20260509-1","2.46.50.20260519-1","2.46.50.20260608-1","2.46.50.20260617-1","2.46.90.20260712-1","2.47-1","2.47-2","2.47-3","2.47-4","2.47-5","2.47-6","2.47.50.20260813-1","2.47.50.20260813-2","2.47.50.20260813-3","2.47.50.20260901-1","2.47.50.20261004-1","2.47.50.20261020-1","2.47.50.20261021-1"]},{"source":"osv","ecosystem":"Debian:13","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.44-3","2.44.50.20250201-1","2.44.50.20250207-1","2.44.50.20250218-1","2.44.50.20250218-2","2.44.50.20250309-1","2.44.50.20250405-1","2.44.50.20250502-1","2.44.50.20250520-1","2.44.50.20250528-1","2.44.50.20250707-1","2.44.90.20250719-1","2.45-1","2.45-2","2.45-3","2.45-4","2.45-5","2.45-6","2.45-7","2.45-8","2.45.50.20250813-1","2.45.50.20250903-1","2.45.50.20251005-1","2.45.50.20251023-1","2.45.50.20251023-2","2.45.50.20251122-1","2.45.50.20251125-1","2.45.50.20251201-1","2.45.50.20251209-1","2.45.50.20260116-1","2.45.50.20260119-1","2.45.90.20260125-1","2.45.90.20260201-1","2.46-1","2.46-2","2.46-3","2.46.50.20260216-1","2.46.50.20260509-1","2.46.50.20260519-1","2.46.50.20260608-1","2.46.50.20260617-1","2.46.90.20260712-1","2.47-1","2.47-2","2.47-3","2.47-4","2.47-5","2.47-6","2.47.50.20260813-1","2.47.50.20260813-2","2.47.50.20260813-3","2.47.50.20260901-1","2.47.50.20261004-1","2.47.50.20261020-1","2.47.50.20261021-1"]},{"source":"osv","ecosystem":"Debian:14","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.47-1"}]}],"versions":["2.44-3","2.44.50.20250201-1","2.44.50.20250207-1","2.44.50.20250218-1","2.44.50.20250218-2","2.44.50.20250309-1","2.44.50.20250405-1","2.44.50.20250502-1","2.44.50.20250520-1","2.44.50.20250528-1","2.44.50.20250707-1","2.44.90.20250719-1","2.45-1","2.45-2","2.45-3","2.45-4","2.45-5","2.45-6","2.45-7","2.45-8","2.45.50.20250813-1","2.45.50.20250903-1","2.45.50.20251005-1","2.45.50.20251023-1","2.45.50.20251023-2","2.45.50.20251122-1","2.45.50.20251125-1","2.45.50.20251201-1","2.45.50.20251209-1","2.45.50.20260116-1","2.45.50.20260119-1","2.45.90.20260125-1","2.45.90.20260201-1","2.46-1","2.46-2","2.46-3","2.46.50.20260216-1","2.46.50.20260509-1","2.46.50.20260519-1","2.46.50.20260608-1","2.46.50.20260617-1","2.46.90.20260712-1"]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP4","package":"gdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.1-14.oe2403sp4"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"gdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.1-14.oe2403sp1"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP3","package":"gdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.1-14.oe2403sp3"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"gdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.2-16.oe2003sp4"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"gdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.1-17.oe2203sp4"}]}]},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.46.1-1.1.hum1"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"binutils-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.46.1-1.1.hum1"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"binutils-gold","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.46.1-1.1.hum1"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"binutils-gprofng","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.46.1-1.1.hum1"}]}],"bundled":9},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.23.52.20130913-0ubuntu1","2.23.90.20131017-1ubuntu1","2.23.90.20131116-1ubuntu1","2.23.91.20131123-1ubuntu1","2.24-1ubuntu1","2.24-1ubuntu2","2.24-2ubuntu1","2.24-2ubuntu2","2.24-2ubuntu3","2.24-4ubuntu1","2.24-5ubuntu1","2.24-5ubuntu2","2.24-5ubuntu3","2.24-5ubuntu3.1","2.24-5ubuntu13","2.24-5ubuntu14","2.24-5ubuntu14.1","2.24-5ubuntu14.2","2.24-5ubuntu14.2+esm1","2.24-5ubuntu14.2+esm2","2.24-5ubuntu14.2+esm3","2.24-5ubuntu14.2+esm5","2.24-5ubuntu14.2+esm6","2.24-5ubuntu14.2+esm7","2.24-5ubuntu14.2+esm8"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.25.1-6ubuntu1","2.25.51.20151022-0ubuntu2","2.25.51.20151022-0ubuntu3","2.25.51.20151027-0ubuntu1","2.25.51.20151028-0ubuntu1","2.25.51.20151106-0ubuntu1","2.25.51.20151113-1ubuntu1","2.25.51.20151113-2ubuntu1","2.25.90.20151125-1ubuntu1","2.25.90.20151125-2ubuntu1","2.25.90.20151211-0ubuntu1","2.25.90.20151211-0ubuntu2","2.25.90.20160101-1ubuntu1","2.25.90.20160101-1ubuntu2","2.26-2ubuntu1","2.26-3ubuntu1","2.26-4ubuntu1","2.26-5ubuntu1","2.26-6ubuntu1","2.26-7ubuntu2","2.26-8ubuntu1","2.26-8ubuntu2","2.26-8ubuntu2.1","2.26.1-1ubuntu1~16.04","2.26.1-1ubuntu1~16.04.1","2.26.1-1ubuntu1~16.04.3","2.26.1-1ubuntu1~16.04.4","2.26.1-1ubuntu1~16.04.5","2.26.1-1ubuntu1~16.04.6","2.26.1-1ubuntu1~16.04.7","2.26.1-1ubuntu1~16.04.8","2.26.1-1ubuntu1~16.04.8+esm1","2.26.1-1ubuntu1~16.04.8+esm3","2.26.1-1ubuntu1~16.04.8+esm4","2.26.1-1ubuntu1~16.04.8+esm5","2.26.1-1ubuntu1~16.04.8+esm6","2.26.1-1ubuntu1~16.04.8+esm7","2.26.1-1ubuntu1~16.04.8+esm9","2.26.1-1ubuntu1~16.04.8+esm11","2.26.1-1ubuntu1~16.04.8+esm12","2.26.1-1ubuntu1~16.04.8+esm13","2.26.1-1ubuntu1~16.04.8+esm14"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.29.1-4ubuntu1","2.29.1-6ubuntu1","2.29.1-7ubuntu1","2.29.1-8ubuntu1","2.29.1-10ubuntu1","2.29.1-12ubuntu1","2.30-4ubuntu1","2.30-5ubuntu1","2.30-7ubuntu1","2.30-8ubuntu1","2.30-9ubuntu1","2.30-10ubuntu1","2.30-11ubuntu1","2.30-14ubuntu2","2.30-15ubuntu1","2.30-20ubuntu2~18.04","2.30-21ubuntu1~18.04","2.30-21ubuntu1~18.04.1","2.30-21ubuntu1~18.04.2","2.30-21ubuntu1~18.04.3","2.30-21ubuntu1~18.04.4","2.30-21ubuntu1~18.04.5","2.30-21ubuntu1~18.04.7","2.30-21ubuntu1~18.04.8","2.30-21ubuntu1~18.04.9","2.30-21ubuntu1~18.04.9+esm1","2.30-21ubuntu1~18.04.9+esm3","2.30-21ubuntu1~18.04.9+esm4","2.30-21ubuntu1~18.04.9+esm5","2.30-21ubuntu1~18.04.9+esm13"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.33-2ubuntu1","2.33.1-1ubuntu1","2.33.1-5ubuntu1","2.33.1-6ubuntu1","2.33.1-6ubuntu3","2.33.90.20200122-1ubuntu2","2.34-1ubuntu1","2.34-3ubuntu1","2.34-4ubuntu1","2.34-5ubuntu1","2.34-6ubuntu1","2.34-6ubuntu1.1","2.34-6ubuntu1.3","2.34-6ubuntu1.4","2.34-6ubuntu1.5","2.34-6ubuntu1.6","2.34-6ubuntu1.7","2.34-6ubuntu1.8","2.34-6ubuntu1.9","2.34-6ubuntu1.10","2.34-6ubuntu1.11","2.34-6ubuntu1.11+esm1","2.34-6ubuntu1.11+esm2"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.37-7ubuntu1","2.37-9ubuntu1","2.37-10ubuntu1","2.37.50.20220106-2ubuntu1","2.37.90.20220126-0ubuntu1","2.37.90.20220130-0ubuntu2","2.38-1ubuntu1","2.38-2ubuntu1","2.38-3ubuntu1","2.38-4ubuntu2","2.38-4ubuntu2.1","2.38-4ubuntu2.2","2.38-4ubuntu2.3","2.38-4ubuntu2.4","2.38-4ubuntu2.5","2.38-4ubuntu2.6","2.38-4ubuntu2.7","2.38-4ubuntu2.8","2.38-4ubuntu2.10","2.38-4ubuntu2.11","2.38-4ubuntu2.12"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.41-5ubuntu1","2.41-6ubuntu1","2.41.50.20231206-1ubuntu1","2.41.50.20231214-1ubuntu1","2.41.50.20231227-1ubuntu1","2.41.90.20240122-1ubuntu1","2.42-2ubuntu1","2.42-3ubuntu1","2.42-4ubuntu1","2.42-4ubuntu2","2.42-4ubuntu2.3","2.42-4ubuntu2.4","2.42-4ubuntu2.5","2.42-4ubuntu2.6","2.42-4ubuntu2.7","2.42-4ubuntu2.8","2.42-4ubuntu2.10"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.46-3ubuntu2","2.46.50.20260608-1ubuntu1","2.47-2ubuntu1","2.47-6ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.45-7ubuntu1","2.45-7ubuntu2","2.45-8ubuntu1","2.45.50.20251125-1ubuntu1","2.45.50.20251201-1ubuntu1","2.45.50.20251209-1ubuntu1","2.45.50.20260119-1ubuntu1","2.46-1ubuntu1","2.46-2ubuntu1","2.46-3ubuntu1","2.46-3ubuntu2"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.47-1.1"}]}],"bundled":16}],"products":[{"vendor":"red hat","product":"red hat enterprise linux 10"},{"vendor":"red hat","product":"red hat enterprise linux 6"},{"vendor":"red hat","product":"red hat enterprise linux 7"},{"vendor":"red hat","product":"red hat enterprise linux 8"},{"vendor":"red hat","product":"red hat enterprise linux 9"},{"vendor":"red hat","product":"red hat hardened images"},{"vendor":"red hat","product":"red hat openshift ai (rhoai)"},{"vendor":"red hat","product":"red hat openshift container platform 4"},{"vendor":"red hat","product":"red hat openshift container platform 5"}],"references":[{"url":"https://access.redhat.com/errata/RHSA-2026:47171","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-15003","tags":["vdb-entry","x_refsource_REDHAT","report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2497805","tags":["issue-tracking","x_refsource_REDHAT","report"]},{"url":"https://sourceware.org/bugzilla/show_bug.cgi?id=34053","tags":["article"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-15003","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-3mxj-5hq2-2h4f"},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-15003","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3255","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3256","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3257","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3314","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3315","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/","tags":["article"]},{"url":"https://images.redhat.com/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-90804","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-90802","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-90830","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-90828","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-90829","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-90803","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-90831","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-90801","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_47171.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-15003","tags":["advisory","report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2533176","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-90801","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-90801","tags":["advisory"]},{"url":"https://github.com/r1ck9-2q/cve_summit/blob/main/Heap-buffer-overflow%20in%20%60cache_bwrite%60%20(bfdcache.c436)%20via%20malformed%20ELF%20with%20%60--gc-sections%20-w%60.md","tags":["article"]},{"url":"https://sourceware.org/bugzilla/show_bug.cgi?id=34442","tags":["article"]},{"url":"https://vuldb.com/cve/CVE-2026-90801","tags":["article"]},{"url":"https://vuldb.com/submit/920276","tags":["article"]},{"url":"https://vuldb.com/vuln/403303","tags":["article"]},{"url":"https://vuldb.com/vuln/403303/cti","tags":["article"]},{"url":"https://www.gnu.org/","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2533185","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-90802","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-90802","tags":["advisory"]},{"url":"https://github.com/r1ck9-2q/cve_summit/blob/main/SEGV%20in%20%60bfd_putl64%60%20(bfdlibbfd.c989)%20during%20relocation%20output%20via%20malformed%20ELF.md","tags":["article"]},{"url":"https://sourceware.org/bugzilla/show_bug.cgi?id=34443","tags":["article"]},{"url":"https://vuldb.com/cve/CVE-2026-90802","tags":["article"]},{"url":"https://vuldb.com/submit/920277","tags":["article"]},{"url":"https://vuldb.com/vuln/403304","tags":["article"]},{"url":"https://vuldb.com/vuln/403304/cti","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2533196","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-90803","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-90803","tags":["advisory"]},{"url":"https://github.com/r1ck9-2q/cve_summit/blob/main/Heap%20OOB%20readwrite%20and%20SEGV%20in%20%60elf_x86_64_relocate_section%60%20(bfdelf64-x86-64.c4530%20%204835)%20via%20malformed%20relocation.md","tags":["article"]},{"url":"https://sourceware.org/bugzilla/show_bug.cgi?id=34444","tags":["article"]},{"url":"https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=471130b39c03623ec6d78ece377ff4da3f6bfe7b","tags":["article"]},{"url":"https://vuldb.com/cve/CVE-2026-90803","tags":["article"]},{"url":"https://vuldb.com/submit/920280","tags":["article"]},{"url":"https://vuldb.com/vuln/403305","tags":["article"]},{"url":"https://vuldb.com/vuln/403305/cti","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2533209","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-90804","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-90804","tags":["advisory"]},{"url":"https://github.com/r1ck9-2q/cve_summit/blob/main/Heap%20OOB%20write%20%20negative-size%20%60memmove%60%20%20SEGV%20in%20%60_bfd_elf_write_section_eh_frame%60%20(bfdelf-eh-frame.c2064%20%202083%20%202193)%20via%20malformed%20%60.eh_frame%60.md","tags":["article"]},{"url":"https://sourceware.org/bugzilla/show_bug.cgi?id=34445","tags":["article"]},{"url":"https://vuldb.com/cve/CVE-2026-90804","tags":["article"]},{"url":"https://vuldb.com/submit/920281","tags":["article"]},{"url":"https://vuldb.com/vuln/403306","tags":["article"]},{"url":"https://vuldb.com/vuln/403306/cti","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2533528","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-90828","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-90828","tags":["advisory"]},{"url":"https://sourceware.org/bugzilla/attachment.cgi?id=16882","tags":["article"]},{"url":"https://sourceware.org/bugzilla/show_bug.cgi?id=34450","tags":["article"]},{"url":"https://vuldb.com/cve/CVE-2026-90828","tags":["article"]},{"url":"https://vuldb.com/submit/925227","tags":["article"]},{"url":"https://vuldb.com/vuln/403330","tags":["article"]},{"url":"https://vuldb.com/vuln/403330/cti","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2533532","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-90829","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-90829","tags":["advisory"]},{"url":"https://sourceware.org/bugzilla/attachment.cgi?id=16883","tags":["article"]},{"url":"https://sourceware.org/bugzilla/show_bug.cgi?id=34451","tags":["article"]},{"url":"https://vuldb.com/cve/CVE-2026-90829","tags":["article"]},{"url":"https://vuldb.com/submit/925228","tags":["article"]},{"url":"https://vuldb.com/vuln/403331","tags":["article"]},{"url":"https://vuldb.com/vuln/403331/cti","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2533539","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-90830","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-90830","tags":["advisory"]},{"url":"https://sourceware.org/bugzilla/attachment.cgi?id=16884","tags":["article"]},{"url":"https://sourceware.org/bugzilla/show_bug.cgi?id=34452","tags":["article"]},{"url":"https://vuldb.com/cve/CVE-2026-90830","tags":["article"]},{"url":"https://vuldb.com/submit/925229","tags":["article"]},{"url":"https://vuldb.com/vuln/403332","tags":["article"]},{"url":"https://vuldb.com/vuln/403332/cti","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2533541","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-90831","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-90831","tags":["advisory"]},{"url":"https://sourceware.org/bugzilla/attachment.cgi?id=16886","tags":["article"]},{"url":"https://sourceware.org/bugzilla/show_bug.cgi?id=34454","tags":["article"]},{"url":"https://vuldb.com/cve/CVE-2026-90831","tags":["article"]},{"url":"https://vuldb.com/submit/925230","tags":["article"]},{"url":"https://vuldb.com/vuln/403333","tags":["article"]},{"url":"https://vuldb.com/vuln/403333/cti","tags":["article"]},{"url":"https://ubuntu.com/security/CVE-2026-15003","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2025-11082","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-11839","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-11840","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-69644","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-69645","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-69646","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-69647","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-69648","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-69649","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-69652","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-15003","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-18220","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-3441","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-3442","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4647","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-6846","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2026-15003","title":"Binutils: gnu binutils: heap-buffer-overflow in linker leads to information disclosure and denial of service","description":"A flaw was found in the GNU Binutils (Binary Utilities) linker. This vulnerability, a heap-buffer-overflow read (CWE-125), occurs when the linker processes a specially crafted 32-bit XCOFF (Extended Common Object File Format) object file. An attacker could exploit this by providing a malicious file, leading to an out-of-bounds read of memory. This can result in information disclosure, potentially revealing sensitive heap data, and a Denial of Service (DoS) due to the linker crashing.","status":"published","published":"2026-07-27T13:22:21.523Z","modified":"2026-11-06T07:39:32.341Z","cvss":[{"version":"3.1","score":5.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:H","level":"medium","assessor":"cna"}],"cwes":["CWE-125"],"updated_at":"2026-11-06T08:57:32.08691Z"}],"euvd":[{"id":"EUVD-2026-49202","description":"A flaw was found in the GNU Binutils (Binary Utilities) linker. This vulnerability, a heap-buffer-overflow read (CWE-125), occurs when the linker processes a specially crafted 32-bit XCOFF (Extended Common Object File Format) object file. An attacker could exploit this by providing a malicious file, leading to an out-of-bounds read of memory. This can result in information disclosure, potentially revealing sensitive heap data, and a Denial of Service (DoS) due to the linker crashing.","status":"published","published":"2026-07-27T13:22:21Z","modified":"2026-11-06T07:39:32Z","cvss":[{"version":"3.1","score":5.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:H","level":"medium"}],"updated_at":"2026-11-06T09:04:28.113071Z"}],"ghsa":[{"id":"GHSA-3mxj-5hq2-2h4f","title":"A flaw was found in the GNU Binutils (Binary Utilities) linker. This vulnerability, a heap-buffer...","description":"A flaw was found in the GNU Binutils (Binary Utilities) linker. This vulnerability, a heap-buffer-overflow read (CWE-125), occurs when the linker processes a specially crafted 32-bit XCOFF (Extended Common Object File Format) object file. An attacker could exploit this by providing a malicious file, leading to an out-of-bounds read of memory. This can result in information disclosure, potentially revealing sensitive heap data, and a Denial of Service (DoS) due to the linker crashing.","status":"published","published":"2026-07-27T15:32:30Z","modified":"2026-07-28T18:32:46Z","cvss":[{"version":"3.1","score":5.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:H","level":"medium"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T15:09:52.627235Z"}],"nvd":[{"id":"CVE-2026-15003","description":"A flaw was found in the GNU Binutils (Binary Utilities) linker. This vulnerability, a heap-buffer-overflow read (CWE-125), occurs when the linker processes a specially crafted 32-bit XCOFF (Extended Common Object File Format) object file. An attacker could exploit this by providing a malicious file, leading to an out-of-bounds read of memory. This can result in information disclosure, potentially revealing sensitive heap data, and a Denial of Service (DoS) due to the linker crashing.","status":"published","published":"2026-07-27T14:16:51.473Z","modified":"2026-11-06T08:17:22.543Z","cvss":[{"version":"3.1","score":5.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:H","level":"medium","assessor":"secondary"}],"cwes":["CWE-125"],"updated_at":"2026-11-06T11:59:56.786002Z"}],"osv":[{"id":"DEBIAN-CVE-2026-15003","description":"A flaw was found in the GNU Binutils (Binary Utilities) linker. This vulnerability, a heap-buffer-overflow read (CWE-125), occurs when the linker processes a specially crafted 32-bit XCOFF (Extended Common Object File Format) object file. An attacker could exploit this by providing a malicious file, leading to an out-of-bounds read of memory. This can result in information disclosure, potentially revealing sensitive heap data, and a Denial of Service (DoS) due to the linker crashing.","status":"published","published":"2026-07-27T14:16:51.473Z","modified":"2026-11-07T09:47:34.162007375Z","cvss":[{"version":"3.1","score":5.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:H","level":"medium"}],"updated_at":"2026-11-07T10:14:39.995311Z"},{"id":"OESA-2026-3255","title":"gdb security update","description":"GDB, the GNU Project debugger, allows you to see what is going on inside another program while it executes -- or what another program was doing at the moment it crashed.\r\n\r\nSecurity Fix(es):\n\nA flaw was found in the GNU Binutils (Binary Utilities) linker. This vulnerability, a heap-buffer-overflow read (CWE-125), occurs when the linker processes a specially crafted 32-bit XCOFF (Extended Common Object File Format) object file. An attacker could exploit this by providing a malicious file, leading to an out-of-bounds read of memory. This can result in information disclosure, potentially revealing sensitive heap data, and a Denial of Service (DoS) due to the linker crashing.(CVE-2026-15003)","status":"published","published":"2026-08-07T02:42:14Z","modified":"2026-08-07T03:00:51.859230672Z","cvss":[{"version":"3.1","score":5.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:46.823443Z"},{"id":"OESA-2026-3256","title":"gdb security update","description":"GDB, the GNU Project debugger, allows you to see what is going on inside another program while it executes -- or what another program was doing at the moment it crashed.\r\n\r\nSecurity Fix(es):\n\nA flaw was found in the GNU Binutils (Binary Utilities) linker. This vulnerability, a heap-buffer-overflow read (CWE-125), occurs when the linker processes a specially crafted 32-bit XCOFF (Extended Common Object File Format) object file. An attacker could exploit this by providing a malicious file, leading to an out-of-bounds read of memory. This can result in information disclosure, potentially revealing sensitive heap data, and a Denial of Service (DoS) due to the linker crashing.(CVE-2026-15003)","status":"published","published":"2026-08-07T02:42:15Z","modified":"2026-08-07T03:00:52.841870202Z","cvss":[{"version":"3.1","score":5.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:46.823443Z"},{"id":"OESA-2026-3257","title":"gdb security update","description":"GDB, the GNU Project debugger, allows you to see what is going on inside another program while it executes -- or what another program was doing at the moment it crashed.\r\n\r\nSecurity Fix(es):\n\nA flaw was found in the GNU Binutils (Binary Utilities) linker. This vulnerability, a heap-buffer-overflow read (CWE-125), occurs when the linker processes a specially crafted 32-bit XCOFF (Extended Common Object File Format) object file. An attacker could exploit this by providing a malicious file, leading to an out-of-bounds read of memory. This can result in information disclosure, potentially revealing sensitive heap data, and a Denial of Service (DoS) due to the linker crashing.(CVE-2026-15003)","status":"published","published":"2026-08-07T02:42:17Z","modified":"2026-08-07T03:00:52.886253226Z","cvss":[{"version":"3.1","score":5.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:46.823443Z"},{"id":"OESA-2026-3314","title":"gdb security update","description":"GDB, the GNU Project debugger, allows you to see what is going on inside another program while it executes -- or what another program was doing at the moment it crashed.\r\n\r\nSecurity Fix(es):\n\nA flaw was found in the GNU Binutils (Binary Utilities) linker. This vulnerability, a heap-buffer-overflow read (CWE-125), occurs when the linker processes a specially crafted 32-bit XCOFF (Extended Common Object File Format) object file. An attacker could exploit this by providing a malicious file, leading to an out-of-bounds read of memory. This can result in information disclosure, potentially revealing sensitive heap data, and a Denial of Service (DoS) due to the linker crashing.(CVE-2026-15003)","status":"published","published":"2026-08-13T13:56:38Z","modified":"2026-08-16T01:45:09.279526546Z","cvss":[{"version":"3.1","score":5.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:46.823443Z"},{"id":"OESA-2026-3315","title":"gdb security update","description":"GDB, the GNU Project debugger, allows you to see what is going on inside another program while it executes -- or what another program was doing at the moment it crashed.\r\n\r\nSecurity Fix(es):\n\nA flaw was found in the GNU Binutils (Binary Utilities) linker. This vulnerability, a heap-buffer-overflow read (CWE-125), occurs when the linker processes a specially crafted 32-bit XCOFF (Extended Common Object File Format) object file. An attacker could exploit this by providing a malicious file, leading to an out-of-bounds read of memory. This can result in information disclosure, potentially revealing sensitive heap data, and a Denial of Service (DoS) due to the linker crashing.(CVE-2026-15003)","status":"published","published":"2026-08-13T13:56:40Z","modified":"2026-08-16T01:45:10.721088748Z","cvss":[{"version":"3.1","score":5.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:46.823443Z"},{"id":"RHSA-2026:47171","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update","status":"published","published":"2026-07-29T10:11:39Z","modified":"2026-10-17T10:14:33Z","cvss":[{"version":"3.1","score":6.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:20.984762Z"},{"id":"UBUNTU-CVE-2026-15003","description":"A flaw was found in the GNU Binutils (Binary Utilities) linker. This vulnerability, a heap-buffer-overflow read (CWE-125), occurs when the linker processes a specially crafted 32-bit XCOFF (Extended Common Object File Format) object file. An attacker could exploit this by providing a malicious file, leading to an out-of-bounds read of memory. This can result in information disclosure, potentially revealing sensitive heap data, and a Denial of Service (DoS) due to the linker crashing.","status":"published","published":"2026-07-27T14:16:00Z","modified":"2026-10-17T12:59:53.094217898Z","cvss":[{"version":"3.1","score":5.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T16:56:00.592716Z"},{"id":"AZL-94187","title":"CVE-2026-15003 affecting package binutils for versions less than 2.41-13","description":"A flaw was found in the GNU Binutils (Binary Utilities) linker. This vulnerability, a heap-buffer-overflow read (CWE-125), occurs when the linker processes a specially crafted 32-bit XCOFF (Extended Common Object File Format) object file. An attacker could exploit this by providing a malicious file, leading to an out-of-bounds read of memory. This can result in information disclosure, potentially revealing sensitive heap data, and a Denial of Service (DoS) due to the linker crashing.","status":"published","published":"2026-07-27T14:16:51Z","modified":"2026-11-05T05:40:51Z","updated_at":"2026-11-05T16:41:25.880689Z"},{"id":"AZL-94211","title":"CVE-2026-15003 affecting package gdb for versions less than 13.2-11","description":"A flaw was found in the GNU Binutils (Binary Utilities) linker. This vulnerability, a heap-buffer-overflow read (CWE-125), occurs when the linker processes a specially crafted 32-bit XCOFF (Extended Common Object File Format) object file. An attacker could exploit this by providing a malicious file, leading to an out-of-bounds read of memory. This can result in information disclosure, potentially revealing sensitive heap data, and a Denial of Service (DoS) due to the linker crashing.","status":"published","published":"2026-07-27T14:16:51Z","modified":"2026-11-05T05:40:51Z","updated_at":"2026-11-05T16:41:25.880689Z"},{"id":"openSUSE-SU-2026:11932-1","title":"binutils-2.47-1.1 on GA media","description":"These are all security issues fixed in the binutils-2.47-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-09-30T00:00:00Z","modified":"2026-10-01T11:15:05.44014221Z","updated_at":"2026-11-02T16:58:40.245664Z"}]}}