CVE-2026-91782

LOW 3.3

GNU Binutils Dynamic Relocation Allocation elfxx-x86.c elf_x86_allocate_dynrelocs null pointer dereference

CVSS Score

3.3

EPSS Score

0.0%

EPSS Percentile

0th

A vulnerability was detected in GNU Binutils 2.47. Affected by this vulnerability is the function elf_x86_allocate_dynrelocs of the file bfd/elfxx-x86.c of the component Dynamic Relocation Allocation. The manipulation results in null pointer dereference. The attack requires a local approach. The exploit is now public and may be used. Upgrading to version 2.48 addresses this issue. The patch is identified as d1268210b6f6/471130b39c0/283d3198bed/0a84e560216/a692a633d40. Upgrading the affected component is recommended.

CWE	CWE-476 CWE-404
Vendor	gnu
Product	binutils
Published	Sep 15, 2026

Stay Ahead of the Next One

Get instant alerts for gnu binutils

Be the first to know when new low vulnerabilities affecting gnu binutils are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Scope

Confidentiality

Integrity

Availability

Affected Versions

GNU / Binutils

2.47

References

NVD ↗ CVE.org ↗ EPSS Data ↗

vuldb.com: https://vuldb.com/vuln/404053 vuldb.com: https://vuldb.com/vuln/404053/cti vuldb.com: https://vuldb.com/cve/CVE-2026-91782 vuldb.com: https://vuldb.com/submit/933335 sourceware.org: https://sourceware.org/bugzilla/show_bug.cgi?id=34448 github.com: https://github.com/Ech06/CVE_submit/tree/main/bugzilla/pocs/34448 gnu.org: https://www.gnu.org/

Credits

🔍 Ech06 (VulDB User)