CVE-2026-6846
INFO
Priority: 0.00
BB Relevance:
0/100
Published: 2026-04-22
Modified: 2026-10-26
First seen: 2026-10-29
Status: pending_score
Description
A flaw was found in binutils. A heap-buffer-overflow vulnerability exists when processing a specially crafted XCOFF (Extended Common Object File Format) object file during linking. A local attacker could trick a user into processing this malicious file, which could lead to arbitrary code execution, allowing the attacker to run unauthorized commands, or cause a denial of service, making the system unavailable.
Weakness Classification (1)
Affected Software (7)
| Vendor | Product | Version |
|---|---|---|
| gnu | binutils | < 2.46 |
| redhat | enterprise_linux | 6.0 |
| redhat | enterprise_linux | 8.0 |
| redhat | enterprise_linux | 9.0 |
| redhat | enterprise_linux | 10.0 |
| redhat | hardened_images | - |
| redhat | openshift_container_platform | 4.0 |
References & Advisories (5)
Third Party Advisory
Issue Tracking
Third Party Advisory