CVE-2026-90830 | GNU Binutils 2.47 Section Merge bfd/merge.c _bfd_write_merged_section null pointer dereference (Bug 34452)

September 13, 2026 Yanac

A vulnerability was found in GNU Binutils 2.47. It has been classified as problematic. Impacted is the function _bfd_write_merged_section of the file bfd/merge.c of the component Section Merge. The manipulation leads to null pointer dereference.

This vulnerability is documented as CVE-2026-90830. The attack needs to be performed locally. Additionally, an exploit exists.

The project was informed of the problem early through a bug report but has not responded yet.VulDB Recent EntriesRead More