What’s Vulnerable › Products
GNU Binutils vulnerabilities
288 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 64 published in the last 12 months.
Check whether your GNU Binutils version is affected
Latest GNU Binutils vulnerabilities
- CVE-2026-91782 — GNU Binutils Dynamic Relocation Allocation elfxx-x86.c elf_x86_allocate_dynrelocs null pointer dereference (CVSS 3.3)
- CVE-2026-91781 — GNU Binutils ELF Section elf64-x86-64.c elf_x86_64_common_section_index null pointer dereference (CVSS 3.3)
- CVE-2026-91780 — GNU Binutils elflink.c elf_link_add_object_symbols null pointer dereference (CVSS 3.3)
- CVE-2026-91779 — GNU Binutils Eh Frame elf-eh-frame.c _bfd_elf_eh_frame_section_offset null pointer dereference (CVSS 3.3)
- CVE-2026-90831 — GNU Binutils ELF String Table elf-strtab.c _bfd_elf_strtab_delref memory corruption (CVSS 5.3)
- CVE-2026-90830 — GNU Binutils Section Merge merge.c _bfd_write_merged_section null pointer dereference (CVSS 5.3)
- CVE-2026-90829 — GNU Binutils SHT_GROUP Section elf.c bfd_elf_set_group_contents null pointer dereference (CVSS 5.3)
- CVE-2026-90828 — GNU Binutils ELF Orphan Section ldelf.c elf_orphan_compatible null pointer dereference (CVSS 6.6)
- CVE-2026-90804 — GNU Binutils Eh Frame Section elf-eh-frame.c _bfd_elf_write_section_eh_frame buffer overflow (CVSS 6.1)
- CVE-2026-90803 — GNU Binutils ld elf64-x86-64.c elf_x86_64_relocate_section buffer overflow (CVSS 6.8)
- CVE-2026-90802 — GNU Binutils ld libbfd.c bfd_putl64 null pointer dereference (CVSS 4.4)
- CVE-2026-90801 — GNU Binutils ld cache.c cache_bwrite buffer overflow (CVSS 6.6)
- CVE-2026-6846 — Binutils: binutils: arbitrary code execution via malformed xcoff object file processing (CVSS 7.8)
- CVE-2026-6845 — Binutils: binutils: denial of service via crafted elf file (CVSS 5.0)
- CVE-2026-6844 — Binutils: binutils: denial of service vulnerabilities in readelf via crafted elf files (CVSS 5.5)
- CVE-2026-4647 — Binutils: out-of-bounds read in xcoff relocation processing in gnu binutils bfd library (CVSS 6.1)
- CVE-2026-3442 — Binutils: gnu binutils: information disclosure or denial of service via out-of-bounds read in bfd linker (CVSS 7.1)
- CVE-2026-3441 — Binutils: gnu binutils: information disclosure via specially crafted xcoff object file (CVSS 7.1)
- CVE-2025-69648 — (CVSS 6.2)
- CVE-2025-69647 — (CVSS 6.2)
- CVE-2025-69652 — (CVSS 6.2)
- CVE-2025-69650 — (CVSS 7.5)
- CVE-2025-69649 — (CVSS 7.5)
- CVE-2025-69651 — (CVSS 5.5)
- CVE-2025-69646 — (CVSS 5.5)