Red Hat Security AdvisoryRHSA-2026:7098
Red Hat Hardened Images RPMs bug fix and enhancement update
Released 2026-04-08 · Red Hat rating Moderate · View on Red Hat →
Fixes 25 records
Priority HIGH 72
GNU Binutils thru 2.46 readelf contains a double free vulnerability when processing a crafted ELF binary with malformed relocation data.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00588 · Published 2026-03-06 · Partial fix CWE-415
Priority HIGH 72
An issue was discovered in function d_print_comp_inner in file cp-demangle.c in BinUtils 2.26 allows attackers to cause a denial of service via crafted PE file.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00376 · Published 2025-12-29 · Partial fix CWE-121
Priority HIGH 72
An issue was discovered in function d_discriminator in file cp-demangle.c in BinUtils 2.26 allows attackers to cause a denial of service via crafted PE file.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00376 · Published 2025-12-29 · Partial fix CWE-400
Priority HIGH 72
A buffer overflow vulnerability in function gnu_special in file cplus-dem.c in BinUtils 2.26 allows attackers to cause a denial of service via crafted PE file.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.0037 · Published 2025-12-29 · Partial fix CWE-122
Priority HIGH 66
GNU Binutils thru 2.46 readelf contains a null pointer dereference vulnerability when processing a crafted ELF binary with malformed header fields.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00308 · Published 2026-03-06 · Partial fix CWE-476
Priority HIGH 66
An issue was discovered in function d_abi_tags in file cp-demangle.c in BinUtils 2.26 allows attackers to cause a denial of service via crafted PE file.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00311 · Published 2025-12-29 · Partial fix CWE-20
Priority HIGH 66
An issue was discovered in function d_print_comp_inner in file cp-demangle.c in BinUtils 2.26 allows attackers to cause a denial of service via crafted PE file.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00244 · Published 2025-12-29 · Partial fix CWE-20
Priority MEDIUM 61
GNU Binutils thru 2.46 readelf contains a vulnerability that leads to an abort (SIGABRT) when processing a crafted ELF binary with malformed DWARF abbrev or debug information.
CVSS 3.1MEDIUM 6.2· Local · No auth · No interaction · EPSS 0.00202 · Published 2026-03-06 · Partial fix CWE-460
Priority MEDIUM 61
GNU Binutils thru 2.45.1 readelf contains a denial-of-service vulnerability when processing a crafted binary with malformed DWARF .debug_rnglists data.
CVSS 3.1MEDIUM 6.2· Local · No auth · No interaction · EPSS 0.00202 · Published 2026-03-09 · Partial fix CWE-835
Priority MEDIUM 61
GNU Binutils thru 2.45.1 readelf contains a denial-of-service vulnerability when processing a crafted binary with malformed DWARF loclists data.
CVSS 3.1MEDIUM 6.2· Local · No auth · No interaction · EPSS 0.00178 · Published 2026-03-09 · Partial fix CWE-835
Priority MEDIUM 58
GNU Binutils thru 2.46 readelf contains a vulnerability that leads to an invalid pointer free when processing a crafted ELF binary with malformed relocation or symbol data.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00274 · Published 2026-03-06 · Partial fix CWE-476
Priority MEDIUM 58
Binutils objdump contains a denial-of-service vulnerability when processing a crafted binary with malformed DWARF debug_rnglists data.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00175 · Published 2026-03-06 · Partial fix CWE-400
Priority MEDIUM 58
Binutils objdump contains a denial-of-service vulnerability when processing a crafted binary with malformed DWARF debug information.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00192 · Published 2026-03-06 · Partial fix CWE-400
Priority MEDIUM 56
An issue was discovered in Binutils before 2.46.
CVSS 3.1MEDIUM 5.0· Local · Low privileges · User interaction · EPSS 0.00144 · Published 2026-03-06 · Partial fix CWE-400
Priority MEDIUM 55
A weakness has been identified in GNU Binutils 2.45.
CVSS 4.0MEDIUM 4.8· Local · Low privileges · No interaction · EPSS 0.00282 · Published 2025-10-16 · Partial fix CWE-119
Priority MEDIUM 55
A security flaw has been discovered in GNU Binutils 2.45.
CVSS 4.0MEDIUM 4.8· Local · Low privileges · No interaction · EPSS 0.00282 · Published 2025-10-16 · Partial fix CWE-252
Priority MEDIUM 55
A vulnerability was determined in GNU Binutils 2.45.
CVSS 4.0MEDIUM 4.8· Local · Low privileges · No interaction · EPSS 0.00242 · Published 2025-10-08 · Partial fix CWE-119
Priority MEDIUM 55
A vulnerability was found in GNU Binutils 2.45.
CVSS 4.0MEDIUM 4.8· Local · Low privileges · No interaction · EPSS 0.00218 · Published 2025-10-08 · Partial fix CWE-119
Priority MEDIUM 55
A vulnerability was determined in GNU Binutils 2.45.
CVSS 4.0MEDIUM 4.8· Local · Low privileges · No interaction · EPSS 0.00208 · Published 2025-10-07 · Partial fix · 2.46 CWE-119
Priority MEDIUM 55
A vulnerability was found in GNU Binutils 2.45.
CVSS 4.0MEDIUM 4.8· Local · Low privileges · No interaction · EPSS 0.00224 · Published 2025-10-07 · Partial fix · 2.46 CWE-119
Priority MEDIUM 55
A vulnerability has been found in GNU Binutils 2.45.
CVSS 4.0MEDIUM 4.8· Local · Low privileges · No interaction · EPSS 0.00208 · Published 2025-10-07 · Partial fix CWE-119
Priority MEDIUM 55
A vulnerability has been found in GNU Binutils 2.45.
CVSS 4.0MEDIUM 4.8· Local · Low privileges · No interaction · EPSS 0.00261 · Published 2025-09-27 · Partial fix CWE-119
Priority MEDIUM 46
An issue was discovered in function d_unqualified_name in file cp-demangle.c in BinUtils 2.26 allowing attackers to cause a denial of service via crafted PE file.
CVSS 3.1LOW 2.5· Local · No auth · User interaction · EPSS 0.00146 · Published 2025-12-29 · Partial fix CWE-400
Priority LOW 22
A flaw has been found in GNU Binutils 2.45.
CVSS 4.0MEDIUM 4.8· Local · Low privileges · No interaction · EPSS 0.0026 · Published 2025-09-27 · Partial fix CWE-119
Priority LOW 21
A vulnerability was detected in GNU Binutils 2.45.
CVSS 4.0MEDIUM 4.8· Local · Low privileges · No interaction · EPSS 0.00208 · Published 2025-09-27 · Partial fix CWE-119
THREATIST.IORead the docs