{"id":"CVE-2026-90804","aliases":["DEBIAN-CVE-2026-90804","EUVD-2026-77642","GHSA-45j6-5xqm-57mq","RHSA-2026:47171","UBUNTU-CVE-2026-90804"],"status":"published","title":"GNU Binutils Eh Frame Section elf-eh-frame.c _bfd_elf_write_section_eh_frame buffer overflow","description":"A vulnerability was detected in GNU Binutils 2.47. Affected by this issue is the function _bfd_elf_write_section_eh_frame of the file bfd/elf-eh-frame.c of the component Eh Frame Section Handler. Performing a manipulation of the argument cie_length/fde_length/augmentation_data_size/write_offset results in buffer overflow. Attacking locally is a requirement. The exploit is now public and may be used. The project was informed of the problem early through a bug report but has not responded yet.","severity":{"version":"4.0","score":2.4,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P","level":"low","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00197,"percentile":0.09447,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-119","CWE-120"],"published":"2026-07-29T10:11:39Z","modified":"2026-10-28T02:30:21Z","affected":[{"source":"osv","ecosystem":"Debian:12","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.40-2","2.40.50.20230111-1","2.40.50.20230215-1","2.40.50.20230501-1","2.40.50.20230510-1","2.40.50.20230602-1","2.40.50.20230611-1","2.40.50.20230611-2","2.40.50.20230622-1","2.40.50.20230625-1","2.40.50.20230630-1","2.40.90.20230705-1","2.40.90.20230714-1","2.40.90.20230714-2","2.40.90.20230720-1","2.40.90.20230729-1","2.40.90.20230729-2","2.41-1","2.41-2","2.41-3","2.41-4","2.41-5","2.41-6","2.41-7","2.41.50.20230731-1","2.41.50.20230803-1","2.41.50.20230905-1","2.41.50.20231010-1","2.41.50.20231101-1","2.41.50.20231125-1","2.41.50.20231202-1","2.41.50.20231206-1","2.41.50.20231214-1","2.41.50.20231227-1","2.41.90.20240115-1","2.41.90.20240122-1","2.42-1","2.42-2","2.42-2+hurd.1","2.42-3","2.42-4","2.42.50.20240614-1","2.42.50.20240618-1","2.42.50.20240625-1","2.42.50.20240710-1","2.42.90.20240720-1","2.42.90.20240720-2","2.43-1","2.43-2","2.43.1-1","2.43.1-2","2.43.1-3","2.43.1-4","2.43.1-5","2.43.50.20240817-1","2.43.50.20240909-1","2.43.50.20241004-1","2.43.50.20241112-1","2.43.50.20241126-1","2.43.50.20241126-2","2.43.50.20241126-3","2.43.50.20241204-1","2.43.50.20241204-2","2.43.50.20241210-1","2.43.50.20241215-1","2.43.50.20241221-1","2.43.50.20241230-1","2.43.50.20250108-1","2.43.90.20250122-1","2.43.90.20250122-2","2.43.90.20250127-1","2.43.90.20250202-1","2.44-1","2.44-2","2.44-3","2.44.50.20250201-1","2.44.50.20250207-1","2.44.50.20250218-1","2.44.50.20250218-2","2.44.50.20250309-1","2.44.50.20250405-1","2.44.50.20250502-1","2.44.50.20250520-1","2.44.50.20250528-1","2.44.50.20250707-1","2.44.90.20250719-1","2.45-1","2.45-2","2.45-3","2.45-4","2.45-5","2.45-6","2.45-7","2.45-8","2.45.50.20250813-1","2.45.50.20250903-1","2.45.50.20251005-1","2.45.50.20251023-1","2.45.50.20251023-2","2.45.50.20251122-1","2.45.50.20251125-1","2.45.50.20251201-1","2.45.50.20251209-1","2.45.50.20260116-1","2.45.50.20260119-1","2.45.90.20260125-1","2.45.90.20260201-1","2.46-1","2.46-2","2.46-3","2.46.50.20260216-1","2.46.50.20260509-1","2.46.50.20260519-1","2.46.50.20260608-1","2.46.50.20260617-1","2.46.90.20260712-1","2.47-1","2.47-2","2.47-3","2.47-4","2.47-5","2.47-6","2.47.50.20260813-1","2.47.50.20260813-2","2.47.50.20260813-3","2.47.50.20260901-1"]},{"source":"osv","ecosystem":"Debian:13","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.44-3","2.44.50.20250201-1","2.44.50.20250207-1","2.44.50.20250218-1","2.44.50.20250218-2","2.44.50.20250309-1","2.44.50.20250405-1","2.44.50.20250502-1","2.44.50.20250520-1","2.44.50.20250528-1","2.44.50.20250707-1","2.44.90.20250719-1","2.45-1","2.45-2","2.45-3","2.45-4","2.45-5","2.45-6","2.45-7","2.45-8","2.45.50.20250813-1","2.45.50.20250903-1","2.45.50.20251005-1","2.45.50.20251023-1","2.45.50.20251023-2","2.45.50.20251122-1","2.45.50.20251125-1","2.45.50.20251201-1","2.45.50.20251209-1","2.45.50.20260116-1","2.45.50.20260119-1","2.45.90.20260125-1","2.45.90.20260201-1","2.46-1","2.46-2","2.46-3","2.46.50.20260216-1","2.46.50.20260509-1","2.46.50.20260519-1","2.46.50.20260608-1","2.46.50.20260617-1","2.46.90.20260712-1","2.47-1","2.47-2","2.47-3","2.47-4","2.47-5","2.47-6","2.47.50.20260813-1","2.47.50.20260813-2","2.47.50.20260813-3","2.47.50.20260901-1"]},{"source":"osv","ecosystem":"Debian:14","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.44-3","2.44.50.20250201-1","2.44.50.20250207-1","2.44.50.20250218-1","2.44.50.20250218-2","2.44.50.20250309-1","2.44.50.20250405-1","2.44.50.20250502-1","2.44.50.20250520-1","2.44.50.20250528-1","2.44.50.20250707-1","2.44.90.20250719-1","2.45-1","2.45-2","2.45-3","2.45-4","2.45-5","2.45-6","2.45-7","2.45-8","2.45.50.20250813-1","2.45.50.20250903-1","2.45.50.20251005-1","2.45.50.20251023-1","2.45.50.20251023-2","2.45.50.20251122-1","2.45.50.20251125-1","2.45.50.20251201-1","2.45.50.20251209-1","2.45.50.20260116-1","2.45.50.20260119-1","2.45.90.20260125-1","2.45.90.20260201-1","2.46-1","2.46-2","2.46-3","2.46.50.20260216-1","2.46.50.20260509-1","2.46.50.20260519-1","2.46.50.20260608-1","2.46.50.20260617-1","2.46.90.20260712-1","2.47-1","2.47-2","2.47-3","2.47-4","2.47-5","2.47-6","2.47.50.20260813-1","2.47.50.20260813-2","2.47.50.20260813-3","2.47.50.20260901-1"]},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.46.1-1.1.hum1"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"binutils-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.46.1-1.1.hum1"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"binutils-gold","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.46.1-1.1.hum1"}]}],"bundled":9},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"binutils-gprofng","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.46.1-1.1.hum1"}]}],"bundled":9},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.23.52.20130913-0ubuntu1","2.23.90.20131017-1ubuntu1","2.23.90.20131116-1ubuntu1","2.23.91.20131123-1ubuntu1","2.24-1ubuntu1","2.24-1ubuntu2","2.24-2ubuntu1","2.24-2ubuntu2","2.24-2ubuntu3","2.24-4ubuntu1","2.24-5ubuntu1","2.24-5ubuntu2","2.24-5ubuntu3","2.24-5ubuntu3.1","2.24-5ubuntu13","2.24-5ubuntu14","2.24-5ubuntu14.1","2.24-5ubuntu14.2","2.24-5ubuntu14.2+esm1","2.24-5ubuntu14.2+esm2","2.24-5ubuntu14.2+esm3","2.24-5ubuntu14.2+esm5","2.24-5ubuntu14.2+esm6","2.24-5ubuntu14.2+esm7","2.24-5ubuntu14.2+esm8"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.25.1-6ubuntu1","2.25.51.20151022-0ubuntu2","2.25.51.20151022-0ubuntu3","2.25.51.20151027-0ubuntu1","2.25.51.20151028-0ubuntu1","2.25.51.20151106-0ubuntu1","2.25.51.20151113-1ubuntu1","2.25.51.20151113-2ubuntu1","2.25.90.20151125-1ubuntu1","2.25.90.20151125-2ubuntu1","2.25.90.20151211-0ubuntu1","2.25.90.20151211-0ubuntu2","2.25.90.20160101-1ubuntu1","2.25.90.20160101-1ubuntu2","2.26-2ubuntu1","2.26-3ubuntu1","2.26-4ubuntu1","2.26-5ubuntu1","2.26-6ubuntu1","2.26-7ubuntu2","2.26-8ubuntu1","2.26-8ubuntu2","2.26-8ubuntu2.1","2.26.1-1ubuntu1~16.04","2.26.1-1ubuntu1~16.04.1","2.26.1-1ubuntu1~16.04.3","2.26.1-1ubuntu1~16.04.4","2.26.1-1ubuntu1~16.04.5","2.26.1-1ubuntu1~16.04.6","2.26.1-1ubuntu1~16.04.7","2.26.1-1ubuntu1~16.04.8","2.26.1-1ubuntu1~16.04.8+esm1","2.26.1-1ubuntu1~16.04.8+esm3","2.26.1-1ubuntu1~16.04.8+esm4","2.26.1-1ubuntu1~16.04.8+esm5","2.26.1-1ubuntu1~16.04.8+esm6","2.26.1-1ubuntu1~16.04.8+esm7","2.26.1-1ubuntu1~16.04.8+esm9","2.26.1-1ubuntu1~16.04.8+esm11","2.26.1-1ubuntu1~16.04.8+esm12","2.26.1-1ubuntu1~16.04.8+esm13","2.26.1-1ubuntu1~16.04.8+esm14"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.29.1-4ubuntu1","2.29.1-6ubuntu1","2.29.1-7ubuntu1","2.29.1-8ubuntu1","2.29.1-10ubuntu1","2.29.1-12ubuntu1","2.30-4ubuntu1","2.30-5ubuntu1","2.30-7ubuntu1","2.30-8ubuntu1","2.30-9ubuntu1","2.30-10ubuntu1","2.30-11ubuntu1","2.30-14ubuntu2","2.30-15ubuntu1","2.30-20ubuntu2~18.04","2.30-21ubuntu1~18.04","2.30-21ubuntu1~18.04.1","2.30-21ubuntu1~18.04.2","2.30-21ubuntu1~18.04.3","2.30-21ubuntu1~18.04.4","2.30-21ubuntu1~18.04.5","2.30-21ubuntu1~18.04.7","2.30-21ubuntu1~18.04.8","2.30-21ubuntu1~18.04.9","2.30-21ubuntu1~18.04.9+esm1","2.30-21ubuntu1~18.04.9+esm3","2.30-21ubuntu1~18.04.9+esm4","2.30-21ubuntu1~18.04.9+esm5","2.30-21ubuntu1~18.04.9+esm13"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.33-2ubuntu1","2.33.1-1ubuntu1","2.33.1-5ubuntu1","2.33.1-6ubuntu1","2.33.1-6ubuntu3","2.33.90.20200122-1ubuntu2","2.34-1ubuntu1","2.34-3ubuntu1","2.34-4ubuntu1","2.34-5ubuntu1","2.34-6ubuntu1","2.34-6ubuntu1.1","2.34-6ubuntu1.3","2.34-6ubuntu1.4","2.34-6ubuntu1.5","2.34-6ubuntu1.6","2.34-6ubuntu1.7","2.34-6ubuntu1.8","2.34-6ubuntu1.9","2.34-6ubuntu1.10","2.34-6ubuntu1.11","2.34-6ubuntu1.11+esm1","2.34-6ubuntu1.11+esm2"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.37-7ubuntu1","2.37-9ubuntu1","2.37-10ubuntu1","2.37.50.20220106-2ubuntu1","2.37.90.20220126-0ubuntu1","2.37.90.20220130-0ubuntu2","2.38-1ubuntu1","2.38-2ubuntu1","2.38-3ubuntu1","2.38-4ubuntu2","2.38-4ubuntu2.1","2.38-4ubuntu2.2","2.38-4ubuntu2.3","2.38-4ubuntu2.4","2.38-4ubuntu2.5","2.38-4ubuntu2.6","2.38-4ubuntu2.7","2.38-4ubuntu2.8","2.38-4ubuntu2.10","2.38-4ubuntu2.11","2.38-4ubuntu2.12"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.41-5ubuntu1","2.41-6ubuntu1","2.41.50.20231206-1ubuntu1","2.41.50.20231214-1ubuntu1","2.41.50.20231227-1ubuntu1","2.41.90.20240122-1ubuntu1","2.42-2ubuntu1","2.42-3ubuntu1","2.42-4ubuntu1","2.42-4ubuntu2","2.42-4ubuntu2.3","2.42-4ubuntu2.4","2.42-4ubuntu2.5","2.42-4ubuntu2.6","2.42-4ubuntu2.7","2.42-4ubuntu2.8","2.42-4ubuntu2.10"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.46-3ubuntu2","2.46.50.20260608-1ubuntu1","2.47-2ubuntu1","2.47-6ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.45-7ubuntu1","2.45-7ubuntu2","2.45-8ubuntu1","2.45.50.20251125-1ubuntu1","2.45.50.20251201-1ubuntu1","2.45.50.20251209-1ubuntu1","2.45.50.20260119-1ubuntu1","2.46-1ubuntu1","2.46-2ubuntu1","2.46-3ubuntu1","2.46-3ubuntu2"]}],"products":[{"vendor":"gnu","product":"binutils"}],"references":[{"url":"https://vuldb.com/vuln/403306","tags":["vdb-entry","technical-description","Permissions Required","Third Party Advisory","VDB Entry","advisory","article"]},{"url":"https://vuldb.com/vuln/403306/cti","tags":["signature","permissions-required","Permissions Required","Third Party Advisory","VDB Entry","report","article"]},{"url":"https://vuldb.com/cve/CVE-2026-90804","tags":["third-party-advisory","Third Party Advisory","VDB Entry","advisory","article"]},{"url":"https://vuldb.com/submit/920281","tags":["third-party-advisory","Exploit","Third Party Advisory","VDB Entry","advisory","article"]},{"url":"https://sourceware.org/bugzilla/show_bug.cgi?id=34445","tags":["issue-tracking","Exploit","Third Party Advisory","report","article"]},{"url":"https://github.com/r1ck9-2q/cve_summit/blob/main/Heap%20OOB%20write%20%20negative-size%20%60memmove%60%20%20SEGV%20in%20%60_bfd_elf_write_section_eh_frame%60%20(bfdelf-eh-frame.c2064%20%202083%20%202193)%20via%20malformed%20%60.eh_frame%60.md","tags":["exploit","Exploit","Mitigation","Third Party Advisory","evidence","article"]},{"url":"https://www.gnu.org/","tags":["broken-link","product","Product","web","article"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-90804","tags":["advisory"]},{"url":"https://www.gnu.org"},{"url":"https://github.com/advisories/GHSA-45j6-5xqm-57mq"},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/90xxx/CVE-2026-90804.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-90804","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:47171","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-15003","tags":["report"]},{"url":"https://access.redhat.com/security/updates/classification/","tags":["article"]},{"url":"https://images.redhat.com/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-90804","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-90802","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-90830","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-90828","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-90829","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-90803","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-90831","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-90801","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_47171.json","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2497805","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-15003","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-15003","tags":["advisory"]},{"url":"https://sourceware.org/bugzilla/show_bug.cgi?id=34053","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2533176","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-90801","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-90801","tags":["advisory"]},{"url":"https://github.com/r1ck9-2q/cve_summit/blob/main/Heap-buffer-overflow%20in%20%60cache_bwrite%60%20(bfdcache.c436)%20via%20malformed%20ELF%20with%20%60--gc-sections%20-w%60.md","tags":["article"]},{"url":"https://sourceware.org/bugzilla/show_bug.cgi?id=34442","tags":["article"]},{"url":"https://vuldb.com/cve/CVE-2026-90801","tags":["article"]},{"url":"https://vuldb.com/submit/920276","tags":["article"]},{"url":"https://vuldb.com/vuln/403303","tags":["article"]},{"url":"https://vuldb.com/vuln/403303/cti","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2533185","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-90802","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-90802","tags":["advisory"]},{"url":"https://github.com/r1ck9-2q/cve_summit/blob/main/SEGV%20in%20%60bfd_putl64%60%20(bfdlibbfd.c989)%20during%20relocation%20output%20via%20malformed%20ELF.md","tags":["article"]},{"url":"https://sourceware.org/bugzilla/show_bug.cgi?id=34443","tags":["article"]},{"url":"https://vuldb.com/cve/CVE-2026-90802","tags":["article"]},{"url":"https://vuldb.com/submit/920277","tags":["article"]},{"url":"https://vuldb.com/vuln/403304","tags":["article"]},{"url":"https://vuldb.com/vuln/403304/cti","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2533196","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-90803","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-90803","tags":["advisory"]},{"url":"https://github.com/r1ck9-2q/cve_summit/blob/main/Heap%20OOB%20readwrite%20and%20SEGV%20in%20%60elf_x86_64_relocate_section%60%20(bfdelf64-x86-64.c4530%20%204835)%20via%20malformed%20relocation.md","tags":["article"]},{"url":"https://sourceware.org/bugzilla/show_bug.cgi?id=34444","tags":["article"]},{"url":"https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=471130b39c03623ec6d78ece377ff4da3f6bfe7b","tags":["article"]},{"url":"https://vuldb.com/cve/CVE-2026-90803","tags":["article"]},{"url":"https://vuldb.com/submit/920280","tags":["article"]},{"url":"https://vuldb.com/vuln/403305","tags":["article"]},{"url":"https://vuldb.com/vuln/403305/cti","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2533209","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-90804","tags":["advisory","report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2533528","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-90828","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-90828","tags":["advisory"]},{"url":"https://sourceware.org/bugzilla/attachment.cgi?id=16882","tags":["article"]},{"url":"https://sourceware.org/bugzilla/show_bug.cgi?id=34450","tags":["article"]},{"url":"https://vuldb.com/cve/CVE-2026-90828","tags":["article"]},{"url":"https://vuldb.com/submit/925227","tags":["article"]},{"url":"https://vuldb.com/vuln/403330","tags":["article"]},{"url":"https://vuldb.com/vuln/403330/cti","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2533532","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-90829","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-90829","tags":["advisory"]},{"url":"https://sourceware.org/bugzilla/attachment.cgi?id=16883","tags":["article"]},{"url":"https://sourceware.org/bugzilla/show_bug.cgi?id=34451","tags":["article"]},{"url":"https://vuldb.com/cve/CVE-2026-90829","tags":["article"]},{"url":"https://vuldb.com/submit/925228","tags":["article"]},{"url":"https://vuldb.com/vuln/403331","tags":["article"]},{"url":"https://vuldb.com/vuln/403331/cti","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2533539","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-90830","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-90830","tags":["advisory"]},{"url":"https://sourceware.org/bugzilla/attachment.cgi?id=16884","tags":["article"]},{"url":"https://sourceware.org/bugzilla/show_bug.cgi?id=34452","tags":["article"]},{"url":"https://vuldb.com/cve/CVE-2026-90830","tags":["article"]},{"url":"https://vuldb.com/submit/925229","tags":["article"]},{"url":"https://vuldb.com/vuln/403332","tags":["article"]},{"url":"https://vuldb.com/vuln/403332/cti","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2533541","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-90831","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-90831","tags":["advisory"]},{"url":"https://sourceware.org/bugzilla/attachment.cgi?id=16886","tags":["article"]},{"url":"https://sourceware.org/bugzilla/show_bug.cgi?id=34454","tags":["article"]},{"url":"https://vuldb.com/cve/CVE-2026-90831","tags":["article"]},{"url":"https://vuldb.com/submit/925230","tags":["article"]},{"url":"https://vuldb.com/vuln/403333","tags":["article"]},{"url":"https://vuldb.com/vuln/403333/cti","tags":["article"]},{"url":"https://ubuntu.com/security/CVE-2026-90804","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2026-90804","title":"GNU Binutils Eh Frame Section elf-eh-frame.c _bfd_elf_write_section_eh_frame buffer overflow","description":"A vulnerability was detected in GNU Binutils 2.47. Affected by this issue is the function _bfd_elf_write_section_eh_frame of the file bfd/elf-eh-frame.c of the component Eh Frame Section Handler. Performing a manipulation of the argument cie_length/fde_length/augmentation_data_size/write_offset results in buffer overflow. Attacking locally is a requirement. The exploit is now public and may be used. The project was informed of the problem early through a bug report but has not responded yet.","status":"published","published":"2026-09-14T17:00:17.351Z","modified":"2026-09-15T13:56:28.768Z","cvss":[{"version":"4.0","score":2.4,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P","level":"low","assessor":"cna"},{"version":"3.1","score":4.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R","level":"medium","assessor":"cna"},{"version":"3.0","score":4.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R","level":"medium","assessor":"cna"},{"version":"2.0","score":4.3,"vector":"AV:L/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR","assessor":"cna"}],"cwes":["CWE-120","CWE-119"],"updated_at":"2026-11-02T13:45:47.885058Z"}],"euvd":[{"id":"EUVD-2026-77642","description":"A vulnerability was detected in GNU Binutils 2.47. Affected by this issue is the function _bfd_elf_write_section_eh_frame of the file bfd/elf-eh-frame.c of the component Eh Frame Section Handler. Performing a manipulation of the argument cie_length/fde_length/augmentation_data_size/write_offset results in buffer overflow. Attacking locally is a requirement. The exploit is now public and may be used. The project was informed of the problem early through a bug report but has not responded yet.","status":"published","published":"2026-09-14T17:00:17Z","modified":"2026-09-15T13:56:28Z","cvss":[{"version":"4.0","score":2.4,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P","level":"low"}],"updated_at":"2026-11-02T17:28:18.438671Z"}],"ghsa":[{"id":"GHSA-45j6-5xqm-57mq","title":"A vulnerability was detected in GNU Binutils 2.47. Affected by this issue is the function...","description":"A vulnerability was detected in GNU Binutils 2.47. Affected by this issue is the function _bfd_elf_write_section_eh_frame of the file bfd/elf-eh-frame.c of the component Eh Frame Section Handler. Performing a manipulation of the argument cie_length/fde_length/augmentation_data_size/write_offset results in buffer overflow. Attacking locally is a requirement. The exploit is now public and may be used. The project was informed of the problem early through a bug report but has not responded yet.","status":"published","published":"2026-09-14T18:31:22Z","modified":"2026-09-14T18:31:23Z","cvss":[{"version":"4.0","score":0.9,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"low"},{"version":"3.1","score":4.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L","level":"medium"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T15:11:51.662242Z"}],"nvd":[{"id":"CVE-2026-90804","description":"A vulnerability was detected in GNU Binutils 2.47. Affected by this issue is the function _bfd_elf_write_section_eh_frame of the file bfd/elf-eh-frame.c of the component Eh Frame Section Handler. Performing a manipulation of the argument cie_length/fde_length/augmentation_data_size/write_offset results in buffer overflow. Attacking locally is a requirement. The exploit is now public and may be used. The project was informed of the problem early through a bug report but has not responded yet.","status":"published","published":"2026-09-14T17:17:57.163Z","modified":"2026-09-18T14:42:39.483Z","cvss":[{"version":"4.0","score":0.9,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"low","assessor":"secondary"},{"version":"3.1","score":4.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L","level":"medium","assessor":"secondary"},{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:H","level":"medium","assessor":"primary"},{"version":"2.0","score":4.3,"vector":"AV:L/AC:L/Au:S/C:P/I:P/A:P","level":"medium","assessor":"secondary"}],"cwes":["CWE-119","CWE-120"],"updated_at":"2026-11-02T14:12:46.980627Z"}],"osv":[{"id":"CVE-2026-90804","title":"GNU Binutils Eh Frame Section elf-eh-frame.c _bfd_elf_write_section_eh_frame buffer overflow","description":"A vulnerability was detected in GNU Binutils 2.47. Affected by this issue is the function _bfd_elf_write_section_eh_frame of the file bfd/elf-eh-frame.c of the component Eh Frame Section Handler. Performing a manipulation of the argument cie_length/fde_length/augmentation_data_size/write_offset results in buffer overflow. Attacking locally is a requirement. The exploit is now public and may be used. The project was informed of the problem early through a bug report but has not responded yet.","status":"published","published":"2026-09-14T17:00:17.351Z","modified":"2026-10-28T02:30:21.085700007Z","cvss":[{"version":"4.0","score":0.9,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P","level":"low"}],"cwes":["CWE-119","CWE-120"],"updated_at":"2026-11-02T15:45:20.269367Z"},{"id":"DEBIAN-CVE-2026-90804","description":"A vulnerability was detected in GNU Binutils 2.47. Affected by this issue is the function _bfd_elf_write_section_eh_frame of the file bfd/elf-eh-frame.c of the component Eh Frame Section Handler. Performing a manipulation of the argument cie_length/fde_length/augmentation_data_size/write_offset results in buffer overflow. Attacking locally is a requirement. The exploit is now public and may be used. The project was informed of the problem early through a bug report but has not responded yet.","status":"published","published":"2026-09-14T17:17:57.163Z","modified":"2026-10-01T03:03:45.692149603Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:H","level":"medium"}],"updated_at":"2026-11-02T15:46:06.410207Z"},{"id":"RHSA-2026:47171","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update","status":"published","published":"2026-07-29T10:11:39Z","modified":"2026-10-17T10:14:33Z","cvss":[{"version":"3.1","score":6.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:20.984762Z"},{"id":"UBUNTU-CVE-2026-90804","description":"A vulnerability was detected in GNU Binutils 2.47. Affected by this issue is the function _bfd_elf_write_section_eh_frame of the file bfd/elf-eh-frame.c of the component Eh Frame Section Handler. Performing a manipulation of the argument cie_length/fde_length/augmentation_data_size/write_offset results in buffer overflow. Attacking locally is a requirement. The exploit is now public and may be used. The project was informed of the problem early through a bug report but has not responded yet.","status":"published","published":"2026-09-14T17:17:00Z","modified":"2026-10-17T13:01:16.851582531Z","cvss":[{"version":"3.1","score":4.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L","level":"medium"},{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:H","level":"medium"},{"version":"4.0","score":0.9,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P","level":"low"}],"updated_at":"2026-11-02T16:57:40.980117Z"}]}}