CVE-2026-4647: Binutils: out-of-bounds read in xcoff relocation processing in gnu binutils bfd library

Published Mar 23, 2026
·
Updated

A flaw was found in the GNU Binutils BFD library, a widely used component for handling binary files such as object files and executables. The issue occurs when processing specially crafted XCOFF object files, where a relocation type value is not properly validated before being used. This can cause the program to read memory outside of intended bounds. As a result, affected tools may crash or expose unintended memory contents, leading to denial-of-service or limited information disclosure risks.

Other sources

An out-of-bounds read vulnerability in the BFD library of GNU Binutils affects the functions xcoffppcrelocatesection() and xcoff64ppcrelocatesection() in coff-rs6000.c and coff64-rs6000.c. The flaw is caused by improper validation of the relocation type field (rtype), which is read from input files and used as an array index without adequate bounds checking. This issue affects all versions of GNU Binutils prior to 2.47. When a specially crafted XCOFF object file is processed, this can lead to out-of-bounds memory access, potentially causing a crash, information disclosure, or unintended control flow behavior.

Red Hat

Binutils: out-of-bounds read in xcoff relocation processing in gnu binutils bfd library

Microsoft

Affected Software

16 affected componentsFixes available
GNU Binutils BFD library<2.47
Microsoft azl3 gdb 13.2-6
Microsoft azl3 binutils 2.41-10
GNU binutils
redhat OpenShift Container Platform=4.0
redhat Enterprise Linux=6.0
redhat Enterprise Linux=7.0
redhat Enterprise Linux=8.0
redhat Enterprise Linux=9.0
redhat Enterprise Linux=10.0
Microsoft azl3 gdb 13.2-6<13.2-7
13.2-7
Microsoft azl3 crash 9.0.0-1<9.0.0-2
9.0.0-2
Microsoft azl3 crash 9.0.0-2<9.0.0-2
9.0.0-2
Microsoft azl3 binutils 2.41-10<2.41-11
2.41-11
Microsoft azl3 binutils 2.41-11<2.41-11
2.41-11
Microsoft azl3 gdb 13.2-7<13.2-7
13.2-7

Remediation

Recommended actions to resolve this vulnerability, in priority order.

  1. Upgrade

    Upgrade to a fixed release to a version that resolves this vulnerability.

    Fixed in 13.2-7
  2. Upgrade

    Upgrade to a fixed release to a version that resolves this vulnerability.

    Fixed in 9.0.0-2
  3. Upgrade

    Upgrade to a fixed release to a version that resolves this vulnerability.

    Fixed in 2.41-11
  4. Upgrade

    Upgrade GNU Binutils to a version that resolves this vulnerability.

    Fixed in 2.47

Event History

Mar 23, 2026
Data Sourced
via Red Hat·12:56 PM
DescriptionSeverityAffected Software
CVE Published
via MITRE·01:37 PM
Data Sourced
via MITRE·01:37 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·02:16 PM
DescriptionSeverityWeaknessAffected Software
Mar 27, 2026
Data Sourced
via Microsoft·08:03 AM
DescriptionSeverityWeaknessAffected Software
Updated
via Microsoft·08:03 AM
Affected Software
Updated
via Microsoft·08:03 AM
DescriptionSeverity
Updated
via Microsoft·08:03 AM
DescriptionSeverityWeakness
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2026-4647?

CVE-2026-4647 is classified as a high severity vulnerability due to its potential for out-of-bounds read exploitation in the GNU Binutils BFD library.

2

How do I fix CVE-2026-4647?

To fix CVE-2026-4647, users should upgrade the GNU Binutils BFD library to version 2.48 or later.

3

What causes the CVE-2026-4647 vulnerability?

CVE-2026-4647 is caused by improper handling of specially crafted XCOFF object files within the GNU Binutils BFD library.

4

Which software is affected by CVE-2026-4647?

The affected software for CVE-2026-4647 includes the GNU Binutils BFD library versions prior to 2.48.

5

What are the implications of CVE-2026-4647?

The implications of CVE-2026-4647 include potential system crashes or unauthorized data access due to the out-of-bounds read during processing of XCOFF files.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203