← Back to CVE List
Vulnerability Analysis
GNU Binutils ELF String Table elf-strtab.c _bfd_elf_strtab_delref memory corruption

CVE-2026-90831

x_open-source

A vulnerability was detected in GNU Binutils 2.47. The affected element is the function _bfd_elf_strtab_delref of the file bfd/elf-strtab.c of the component ELF String Table. The manipulation results in memory corruption. The attack requires a local approach. The exploit is now public and may be used. The project was informed of the problem early through a bug report but has not responded yet.

Memory Corruption No Active Exploit Signals
CVSS Base Score
4.8
MEDIUM
Exploitability:-
Impact Score:-
Temporal Score:-
EPSS:0.15%

Threat Intelligence Signals

CISA KEV
No
KEV Date Added
Ransomware Use
KEV Due Date
VulnCheck In-the-Wild
No
Nuclei Template
No
EPSS Score
0.152%
EPSS Percentile
4.7th pct
GitHub Severity
LOW
SSVC Exploitation
None
SSVC Automatable
No
Vulnerability Class
Memory Corruption

Identity & Timeline

Status-
Assigning Authority-
Discovered Via-
Record Completeness-
CVSS Version / Source-
Reserved-
Published-
Patch Date (date_public)-
Exploit DB Date-
First GitHub PoC Date-
Last Updated-
Time to Patch (Days to fix)-
Exploit Release Gap-
PoC Release Gap-
Exploit DB ReferencesNone identified

Affected Products & Versions

Vendor Product Affected Versions
No affected products specified.

References

No reference links found.

LINK COPIED TO CLIPBOARD