CVE-2026-90804: GNU Binutils Eh Frame Section elf-eh-frame.c _bfd_elf_write_section_eh_frame buffer overflow
A vulnerability was detected in GNU Binutils 2.47. Affected by this issue is the function bfdelfwritesectionehframe of the file bfd/elf-eh-frame.c of the component Eh Frame Section Handler. Performing a manipulation of the argument cielength/fdelength/augmentationdatasize/writeoffset results in buffer overflow. Attacking locally is a requirement. The exploit is now public and may be used. The project was informed of the problem early through a bug report but has not responded yet.
Affected Software
Event History
Frequently Asked Questions
Who is exposed to this issue?
Systems using GNU Binutils 2.47 are affected. Exploitation requires local access, so remote-only attackers cannot directly exploit the issue without first obtaining access to the system.
What does an attacker need to control?
The attacker needs to manipulate the cie_length, fde_length, augmentation_data_size, or write_offset arguments processed by _bfd_elf_write_section_eh_frame. This manipulation can trigger a buffer overflow in the Eh Frame Section Handler.
Is public exploit code available?
Yes. The available information states that a public exploit exists and may be used.
Is a vendor fix available?
The provided information does not identify a fix. It states that the project was notified through an early bug report but had not responded.