A vulnerability has been found in GNU Binutils 2.43/2.44 and classified as problematic. Affected by this vulnerability is the function display_info of the file binutils/bucomm.c of the component objdump. The manipulation leads to memory leak. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The patch is named ba6ad3a18cb26b79e0e3b84c39f707535bbc344d. It is recommended to apply a patch to fix this issue.
Fix
Nothing published yet: no patch, vendor advisory or mitigation reference on NVD, no vendor advisory in the News for this CVE, not in CISA's KEV, no fixed package version. BaselineWatch does not guess at one.
Change history 1
- First seenCVSS 4.8 · gnuNVD modified 2026-10-15 02:18
Affected (CPE criteria) 2
cpe:2.3:a:gnu:binutils:2.43:*:*:*:*:*:*:*cpe:2.3:a:gnu:binutils:2.44:*:*:*:*:*:*:*
References 10
- https://sourceware.org/bugzilla/show_bug.cgi?id=32716 Broken Link
- https://sourceware.org/bugzilla/show_bug.cgi?id=32716#c0 Issue Tracking
- https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=ba6ad3a18cb26b79e0e3b84c39f707535bbc344d Broken Link
- https://vuldb.com/?ctiid.303151 Permissions Required, VDB Entry
- https://vuldb.com/?id.303151 Third Party Advisory, VDB Entry
- https://vuldb.com/?submit.545773 Exploit, Third Party Advisory, VDB Entry
- https://www.gnu.org/ Product
- https://cert-portal.siemens.com/productcert/html/ssa-082556.html
- https://cert-portal.siemens.com/productcert/html/ssa-265688.html
- https://sourceware.org/bugzilla/show_bug.cgi?id=32716 Broken Link