CVE-2026-91779: GNU Binutils Eh Frame elf-eh-frame.c _bfd_elf_eh_frame_section_offset null pointer dereference
A security flaw has been discovered in GNU Binutils 2.47. This affects the function bfdelfehframesectionoffset of the file bfd/elf-eh-frame.c of the component Eh Frame Handler. Performing a manipulation results in null pointer dereference. The attack must be initiated from a local position. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through a bug report but has not responded yet.
Affected Software
Event History
Frequently Asked Questions
What access does an attacker need to exploit this issue?
The attack must be initiated locally and requires low privileges. No user interaction is required.
What is the expected security impact?
The reported impact is a null pointer dereference resulting in availability impact only. Confidentiality and integrity impact are not reported.
Is exploit code available?
Yes. The exploit has been released publicly and may be used in attacks.
Which version is identified as affected?
The issue is reported in GNU Binutils 2.47, specifically in the Eh Frame Handler component.