VYPR
← All advisories
Medium severity6.1NVD Advisory· Published Mar 23, 2026· Updated Jul 15, 2026

CVE-2026-4647

CVE-2026-4647

Description

A flaw was found in the GNU Binutils BFD library, a widely used component for handling binary files such as object files and executables. The issue occurs when processing specially crafted XCOFF object files, where a relocation type value is not properly validated before being used. This can cause the program to read memory outside of intended bounds. As a result, affected tools may crash or expose unintended memory contents, leading to denial-of-service or limited information disclosure risks.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

17
  • Red Hat/Enterprise Linux Servercpe-rescue10 versions
    cpe:/o:redhat:enterprise_linux:10+ 9 more
    • cpe:/o:redhat:enterprise_linux:10
    • cpe:/o:redhat:enterprise_linux:6
    • cpe:/o:redhat:enterprise_linux:7
    • cpe:/o:redhat:enterprise_linux:8
    • cpe:/o:redhat:enterprise_linux:9
    • cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*
    • cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*
    • cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*
    • cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*
    • cpe:2.3:o:redhat:enterprise_linux:10.0:*:*:*:*:*:*:*
  • Red Hat/Hardened Imagescpe-rescue
    cpe:/a:redhat:hummingbird:1
  • Red Hat/Openshift Container Platformcpe-rescue2 versions
    cpe:/a:redhat:openshift:4+ 1 more
    • cpe:/a:redhat:openshift:4
    • cpe:2.3:a:redhat:openshift_container_platform:4.0:*:*:*:*:*:*:*
  • osv-coords2 versions
    pkg:apk/chainguard/binutilspkg:apk/wolfi/binutils
    < 2.46.1-r2+ 1 more
    • (no CPE)range: < 2.46.1-r2
    • (no CPE)range: < 2.46.1-r2
  • GNU/Binutils BFD libraryllm-create
  • GNU/Binutils
    cpe:2.3:a:gnu:binutils:-:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

5

News mentions

0

No linked articles in our index yet.