VYPR
← All advisories
Medium severity6.1NVD Advisory· Published Mar 16, 2026· Updated Jul 13, 2026

CVE-2026-3441

CVE-2026-3441

Description

A flaw was found in GNU Binutils. This heap-based buffer overflow vulnerability, specifically an out-of-bounds read in the bfd linker, allows an attacker to gain access to sensitive information. By convincing a user to process a specially crafted XCOFF object file, an attacker can trigger this flaw, potentially leading to information disclosure or an application level denial of service.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

17
  • osv-coords2 versions
    pkg:apk/chainguard/binutilspkg:apk/wolfi/binutils
    < 2.46.1-r2+ 1 more
    • (no CPE)range: < 2.46.1-r2
    • (no CPE)range: < 2.46.1-r2
  • Red Hat/Enterprise Linux Servercpe-rescue10 versions
    cpe:/o:redhat:enterprise_linux:10+ 9 more
    • cpe:/o:redhat:enterprise_linux:10
    • cpe:/o:redhat:enterprise_linux:6
    • cpe:/o:redhat:enterprise_linux:7
    • cpe:/o:redhat:enterprise_linux:8
    • cpe:/o:redhat:enterprise_linux:9
    • cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*
    • cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*
    • cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*
    • cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*
    • cpe:2.3:o:redhat:enterprise_linux:10.0:*:*:*:*:*:*:*
  • Red Hat/Hardened Imagescpe-rescue
    cpe:/a:redhat:hummingbird:1
  • Red Hat/Openshift Container Platformcpe-rescue2 versions
    cpe:/a:redhat:openshift:4+ 1 more
    • cpe:/a:redhat:openshift:4
    • cpe:2.3:a:redhat:openshift_container_platform:4.0:*:*:*:*:*:*:*
  • GNU/Binutilsllm-fuzzy2 versions
    (expand)+ 1 more
    • (no CPE)
    • cpe:2.3:a:gnu:binutils:-:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.