CVEFinder.io

CVE-2026-91781

ℹī¸ low
🔍 Scan for this CVE
Summary

A security vulnerability has been detected in GNU Binutils 2.47. Affected is the function elf_x86_64_common_section_index of the file bfd/elf64-x86-64.c of the component ELF Section Handler. The manipulation leads to null pointer dereference. The attack needs to be performed locally. The exploit has been disclosed publicly and may be used. Upgrading to version 2.48 is able to address this issue. The identifier of the patch is 7322e9bc30cb282575a701c307851fd3d66fee68. It is suggested to upgrade t

Description

A security vulnerability has been detected in GNU Binutils 2.47. Affected is the function elf_x86_64_common_section_index of the file bfd/elf64-x86-64.c of the component ELF Section Handler. The manipulation leads to null pointer dereference. The attack needs to be performed locally. The exploit has been disclosed publicly and may be used. Upgrading to version 2.48 is able to address this issue. The identifier of the patch is 7322e9bc30cb282575a701c307851fd3d66fee68. It is suggested to upgrade the affected component.

CVSS Score
3.3
Low
EPSS Score
0.1
Exploit Probability
Published Date
2026-09-15
First Seen: 2026-09-16
📊 Relative Risk Intelligence

This CVE is Lower Risk - more severe than 2.8% of all 358,566 vulnerabilities in our database.

#348,692
Below average severity
Severity Percentile
đŸŽ¯ CISA SSVC Assessment Updated: Sep 15, 2026
🔍 Exploitation Status
Poc
Proof-of-concept available
⚙ī¸ Automatable
NO
Requires human interaction
đŸ’Ĩ Technical Impact
Partial
Limited system impact
🏆 Discovered By
Ech06 (VulDB User) (reporter)
SSVC data provided by CISA
Last Modified 2026-09-16
Source NVD 🔗
CVSS Vector 3.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
CVSS Vector 4.0 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CWE IDs (Weakness Types)
CWE-404 CWE-476

đŸ“Ļ Affected Products 1

Vendor Product Status Affected Versions
gnu binutils Affected
v2.47

🔗 References 8

https://github.com/Ech06/CVE_submit/tree/main/bugzil...
Third Party Advisory
https://sourceware.org/bugzilla/show_bug.cgi?id=34449
Exploit Third Party Advisory
https://sourceware.org/git/gitweb.cgi?p=binutils-gdb...
Third Party Advisory
https://vuldb.com/cve/CVE-2026-91781
Third Party Advisory
https://vuldb.com/submit/933336
Third Party Advisory
https://vuldb.com/vuln/404052
Third Party Advisory
https://vuldb.com/vuln/404052/cti
Permissions Required
https://www.gnu.org/
Product

🔗 Related CVEs 6

CVE ID Severity CVSS EPSS Summary Published
CVE-2026-91779 ℹī¸ low 3.3 0.1 A security flaw has been discovered in GNU Binutils 2.47. This affects the function _bfd_elf_eh_frame_section_offset of ... 2026-09-15
CVE-2026-91780 ℹī¸ low 3.3 0.1 A weakness has been identified in GNU Binutils 2.47. This impacts the function elf_link_add_object_symbols of the file b... 2026-09-15
CVE-2026-91782 ℹī¸ low 3.3 0.1 A vulnerability was detected in GNU Binutils 2.47. Affected by this vulnerability is the function elf_x86_allocate_dynre... 2026-09-15
CVE-2026-90829 đŸ”ļ medium 5.3 0.2 A weakness has been identified in GNU Binutils 2.47. This issue affects the function bfd_elf_set_group_contents of the f... 2026-09-14
CVE-2026-90830 đŸ”ļ medium 5.3 0.2 A security vulnerability has been detected in GNU Binutils 2.47. Impacted is the function _bfd_write_merged_section of t... 2026-09-14
CVE-2026-90831 đŸ”ļ medium 5.3 0.2 A vulnerability was detected in GNU Binutils 2.47. The affected element is the function _bfd_elf_strtab_delref of the fi... 2026-09-14
These CVEs affect the same products