A vulnerability was determined in GNU Binutils 2.45. Affected by this vulnerability is the function get_link_hash_entry of the file bfd/elflink.c of the component Linker. This manipulation causes out-of-bounds read. The attack can only be executed locally. The exploit has been publicly disclosed and may be utilized. Upgrading to version 2.46 addresses this issue. Patch name: aeaaa9af6359c8e394ce9cf24911fec4f4d23703. It is advisable to upgrade the affected component.
Fix
Nothing published yet: no patch, vendor advisory or mitigation reference on NVD, no vendor advisory in the News for this CVE, not in CISA's KEV, no fixed package version. BaselineWatch does not guess at one.
Change history 1
- First seenCVSS 1.9 · gnuNVD modified 2026-10-08 13:10
Affected (CPE criteria) 1
cpe:2.3:a:gnu:binutils:2.45:*:*:*:*:*:*:*
References 9
- https://sourceware.org/bugzilla/attachment.cgi?id=16361 Broken Link
- https://sourceware.org/bugzilla/show_bug.cgi?id=33450 Exploit, Issue Tracking
- https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=aeaaa9af6359c8e394ce9cf24911fec4f4d23703 Exploit, Issue Tracking
- https://vuldb.com/?ctiid.327350 Permissions Required, VDB Entry
- https://vuldb.com/?id.327350 Third Party Advisory, VDB Entry
- https://vuldb.com/?submit.665591 Third Party Advisory, VDB Entry
- https://www.gnu.org/ Product
- https://cert-portal.siemens.com/productcert/html/ssa-082556.html
- https://sourceware.org/bugzilla/show_bug.cgi?id=33450 Exploit, Issue Tracking