4.4

CVE-2026-90802

Exploit

GNU Binutils ld libbfd.c bfd_putl64 null pointer dereference

A weakness has been identified in GNU Binutils 2.47. Affected is the function bfd_putl64 of the file bfd/libbfd.c of the component ld. This manipulation causes null pointer dereference. The attack requires local access. The exploit has been made available to the public and could be used for attacks. The project was informed of the problem early through a bug report but has not responded yet.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Gnu ≫ Binutils Version 2.47
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.11% 0.016
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
cna@vuldb.com 1.9 0 0
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
cna@vuldb.com 4.4 1.8 2.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
cna@vuldb.com 3.2 3.1 4.9
AV:L/AC:L/Au:S/C:N/I:P/A:P
CWE-404 Improper Resource Shutdown or Release

The product does not release or incorrectly releases a resource before it is made available for re-use.

CWE-476 NULL Pointer Dereference

The product dereferences a pointer that it expects to be valid but is NULL.

https://www.gnu.org/
Product
https://vuldb.com/vuln/403304
Third Party Advisory
VDB Entry
Permissions Required
https://vuldb.com/vuln/403304/cti
Third Party Advisory
VDB Entry
Permissions Required
https://vuldb.com/cve/CVE-2026-90802
Third Party Advisory
VDB Entry
Permissions Required
https://vuldb.com/submit/920277
Third Party Advisory
VDB Entry
Permissions Required
https://sourceware.org/bugzilla/show_bug.cgi?id=34443
Third Party Advisory
Exploit
https://github.com/r1ck9-2q/cve_summit/blob/main/SEGV%20in%20%60bfd_putl64%60%20(bfdlibbfd.c989)%20during%20relocation%20output%20via%20malformed%20ELF.md
Third Party Advisory
Exploit
Mitigation