MEDIUMVulnerability
CVE-2026-90801
A security flaw has been discovered in GNU Binutils 2.47. This impacts the function cache_bwrite of the file bfd/cache.c of the component ld. The manipulation of the argument nbytes results in buffer overflow. The attack requires a local approach. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through a bug report but has not responded yet.
Properties
- severity
- MEDIUM
- score
- 5.3
- cve_id
- CVE-2026-90801
- signal_observed_at
- 2026-09-23T22:45:07+00:00
- vector
- CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
- published_at
- 2026-09-14T17:17:56.610
- last_modified
- 2026-09-18T14:42:27.257
Related Entities (4)
AFFECTS_PRODUCT (1)
→[Product]
DESCRIBED_BY (1)
→[Source]NVD
HAS_WEAKNESS (2)
→[Weakness]Improper Restriction of Operations within the Bounds of a Memory Buffer
→[Weakness]Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Explore deeper with Ninja Signal's threat intelligence graph