VYPR
← All advisories
Medium severity6.1NVD Advisory· Published Mar 16, 2026· Updated Jul 13, 2026

CVE-2026-3442

CVE-2026-3442

Description

A flaw was found in GNU Binutils. This vulnerability, a heap-based buffer overflow, specifically an out-of-bounds read, exists in the bfd linker component. An attacker could exploit this by convincing a user to process a specially crafted malicious XCOFF object file. Successful exploitation may lead to the disclosure of sensitive information or cause the application to crash, resulting in an application level denial of service.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

17
  • Red Hat/Hardened Imagescpe-rescue
    cpe:/a:redhat:hummingbird:1
  • Red Hat/Openshift Container Platformcpe-rescue2 versions
    cpe:/a:redhat:openshift:4+ 1 more
    • cpe:/a:redhat:openshift:4
    • cpe:2.3:a:redhat:openshift_container_platform:4.0:*:*:*:*:*:*:*
  • Red Hat/Enterprise Linux Servercpe-rescue10 versions
    cpe:/o:redhat:enterprise_linux:10+ 9 more
    • cpe:/o:redhat:enterprise_linux:10
    • cpe:/o:redhat:enterprise_linux:6
    • cpe:/o:redhat:enterprise_linux:7
    • cpe:/o:redhat:enterprise_linux:8
    • cpe:/o:redhat:enterprise_linux:9
    • cpe:2.3:o:redhat:enterprise_linux:10.0:*:*:*:*:*:*:*
    • cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*
    • cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*
    • cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*
    • cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*
  • GNU/Binutils2 versions
    cpe:2.3:a:gnu:binutils:-:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:gnu:binutils:-:*:*:*:*:*:*:*
    • (no CPE)
  • osv-coords2 versions
    pkg:apk/chainguard/binutilspkg:apk/wolfi/binutils
    < 2.46.1-r2+ 1 more
    • (no CPE)range: < 2.46.1-r2
    • (no CPE)range: < 2.46.1-r2

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.