CVE-2026-90804GNU Binutils Eh Frame Section elf-eh-frame.c _bfd_elf_write_section_eh_frame buffer overflow

Description

A vulnerability was detected in GNU Binutils 2.47. Affected by this issue is the function _bfd_elf_write_section_eh_frame of the file bfd/elf-eh-frame.c of the component Eh Frame Section Handler. Performing a manipulation of the argument cie_length/fde_length/augmentation_data_size/write_offset results in buffer overflow. Attacking locally is a requirement. The exploit is now public and may be used. The project was informed of the problem early through a bug report but has not responded yet.

Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.

Affected products and versions

References and patches

• VDB-403306 | GNU Binutils Eh Frame Section elf-eh-frame.c _bfd_elf_write_section_eh_frame buffer overflow vdb-entrytechnical-descriptionPermissions RequiredThird Party Advisory
• VDB-403306 | CTI Indicators (IOB, IOC, IOA) signaturepermissions-requiredPermissions RequiredThird Party Advisory
• CVE-2026-90804 | CVE Analysis and Report third-party-advisoryThird Party AdvisoryVDB Entry
• Submit #920281 | GNU Binutils 2.47 (version date 20260726) Heap-based Buffer Overflow third-party-advisoryExploitThird Party AdvisoryVDB Entry
• https://sourceware.org/bugzilla/show_bug.cgi?id=34445 issue-trackingExploitThird Party Advisory
• https://github.com/r1ck9-2q/cve_summit/blob/main/Heap%20OOB%20write%20%20negative-size%20%60memmove%60%20%20S… exploitExploitMitigationThird Party Advisory
• https://www.gnu.org/ broken-linkproductProduct