Medium severity5.3NVD Advisory· Published Sep 14, 2026· Updated Sep 18, 2026
CVE-2026-90801
CVE-2026-90801
Description
A security flaw has been discovered in GNU Binutils 2.47. This impacts the function cache_bwrite of the file bfd/cache.c of the component ld. The manipulation of the argument nbytes results in buffer overflow. The attack requires a local approach. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through a bug report but has not responded yet.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3Patches
Vulnerability mechanics
References
7- github.com/r1ck9-2q/cve_summit/blob/main/Heap-buffer-overflow%20in%20%60cache_bwrite%60%20(bfdcache.c436)%20via%20malformed%20ELF%20with%20%60--gc-sections%20-w%60.mdnvdExploitMitigationThird Party Advisory
- sourceware.org/bugzilla/show_bug.cginvdExploitThird Party Advisory
- vuldb.com/cve/CVE-2026-90801nvdPermissions RequiredThird Party AdvisoryVDB Entry
- vuldb.com/submit/920276nvdPermissions RequiredThird Party AdvisoryVDB Entry
- vuldb.com/vuln/403303nvdPermissions RequiredThird Party AdvisoryVDB Entry
- vuldb.com/vuln/403303/ctinvdPermissions RequiredThird Party AdvisoryVDB Entry
- www.gnu.orgnvdProduct
News mentions
0No linked articles in our index yet.