A vulnerability classified as critical has been found in GNU Binutils up to 2.44. This affects the function debug_type_samep of the file /binutils/debug.c of the component objdump. The manipulation leads to memory corruption. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue.
Fix
Nothing published yet: no patch, vendor advisory or mitigation reference on NVD, no vendor advisory in the News for this CVE, not in CISA's KEV, no fixed package version. BaselineWatch does not guess at one.
Change history 1
- First seenCVSS 4.8 · gnuNVD modified 2026-10-15 02:18
Affected (CPE criteria) 1
cpe:2.3:a:gnu:binutils:*:*:*:*:*:*:*:*
References 9
- https://sourceware.org/bugzilla/attachment.cgi?id=16004 Broken Link
- https://sourceware.org/bugzilla/show_bug.cgi?id=32829 Exploit, Issue Tracking
- https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=6c3458a8b7ee7d39f070c7b2350851cb2110c65a Product
- https://vuldb.com/?ctiid.310347 Permissions Required, VDB Entry
- https://vuldb.com/?id.310347 Third Party Advisory, VDB Entry
- https://vuldb.com/?submit.584635 Third Party Advisory, VDB Entry
- https://www.gnu.org/ Product
- https://cert-portal.siemens.com/productcert/html/ssa-082556.html
- https://cert-portal.siemens.com/productcert/html/ssa-265688.html