MEDIUMVulnerability
CVE-2026-90804
A vulnerability was detected in GNU Binutils 2.47. Affected by this issue is the function _bfd_elf_write_section_eh_frame of the file bfd/elf-eh-frame.c of the component Eh Frame Section Handler. Performing a manipulation of the argument cie_length/fde_length/augmentation_data_size/write_offset results in buffer overflow. Attacking locally is a requirement. The exploit is now public and may be used. The project was informed of the problem early through a bug report but has not responded yet.
Properties
- severity
- MEDIUM
- score
- 4.8
- cve_id
- CVE-2026-90804
- signal_observed_at
- 2026-09-23T22:45:07+00:00
- vector
- CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L
- published_at
- 2026-09-14T17:17:57.163
- last_modified
- 2026-09-18T14:42:39.483
Related Entities (4)
AFFECTS_PRODUCT (1)
→[Product]
HAS_WEAKNESS (2)
→[Weakness]Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
→[Weakness]Improper Restriction of Operations within the Bounds of a Memory Buffer
DESCRIBED_BY (1)
→[Source]NVD
Explore deeper with Ninja Signal's threat intelligence graph