A security flaw has been discovered in GNU Binutils 2.45. Impacted is the function tg_tag_type of the file prdbg.c. Performing a manipulation results in unchecked return value. The attack needs to be approached locally. The exploit has been released to the public and may be used for attacks.
Fix
Nothing published yet: no patch, vendor advisory or mitigation reference on NVD, no vendor advisory in the News for this CVE, not in CISA's KEV, no fixed package version. BaselineWatch does not guess at one.
Change history 1
- First seenCVSS 1.9 · gnuNVD modified 2026-10-09 10:10
Affected (CPE criteria) 1
cpe:2.3:a:gnu:binutils:2.45:*:*:*:*:*:*:*
References 8
- https://sourceware.org/bugzilla/attachment.cgi?id=16344 Broken Link
- https://sourceware.org/bugzilla/show_bug.cgi?id=33448 Exploit, Issue Tracking
- https://vuldb.com/?ctiid.328774 Permissions Required, VDB Entry
- https://vuldb.com/?id.328774 Third Party Advisory, VDB Entry
- https://vuldb.com/?submit.661279 Third Party Advisory, VDB Entry
- https://www.gnu.org/ Product
- https://cert-portal.siemens.com/productcert/html/ssa-082556.html
- https://sourceware.org/bugzilla/show_bug.cgi?id=33448 Exploit, Issue Tracking