CVE-2026-90801

MediumCVSS 6.6/10Last modified Sep 18, 2026

Description

A security flaw has been discovered in GNU Binutils 2.47. This impacts the function cache_bwrite of the file bfd/cache.c of the component ld. The manipulation of the argument nbytes results in buffer overflow. The attack requires a local approach. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through a bug report but has not responded yet.

Metrics

CVSS 3.1 6.6/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H

Weakness enumeration

CWE-119 CWE-120

Affected software

Vendor	Product	Versions
GNU	Binutils	2.47

References

https://github.com/r1ck9-2q/cve_summit/blob/main/Heap-buffer-overflow%20in%20%60cache_bwrite%60%20(bfdcache.c436)%20via%20malformed%20ELF%20with%20%60--gc-sections%20-w%60.mdExploit, Mitigation, Third Party Advisory
https://sourceware.org/bugzilla/show_bug.cgi?id=34442Exploit, Third Party Advisory
https://vuldb.com/cve/CVE-2026-90801Permissions Required, Third Party Advisory, VDB Entry
https://vuldb.com/submit/920276Permissions Required, Third Party Advisory, VDB Entry
https://vuldb.com/vuln/403303Permissions Required, Third Party Advisory, VDB Entry
https://vuldb.com/vuln/403303/ctiPermissions Required, Third Party Advisory, VDB Entry
https://www.gnu.org/Product

Timeline

Published: Sep 14, 2026
Last modified: Sep 18, 2026
NVD status: Analyzed

Related CVEs from 2026

CVE-2026-908024.4A weakness has been identified in GNU Binutils 2.47. Affected is the function bfd_putl64 of the file bfd/libbfd.c of the component ld. This CVE-2026-908036.8A security vulnerability has been detected in GNU Binutils 2.47. Affected by this vulnerability is the function elf_x86_64_relocate_section CVE-2026-908046.1A vulnerability was detected in GNU Binutils 2.47. Affected by this issue is the function _bfd_elf_write_section_eh_frame of the file bfd/el CVE-2026-908057.3A flaw has been found in subhajitkhan online-clinic-management-system up to e9ee77a8827a1446220fa07ee693dc4d9a29a578. This affects an unknow CVE-2026-908066.3A vulnerability has been found in DjangoCRM django-crm up to 1.2. This vulnerability affects the function BulkUpdateCasesView of the file ba CVE-2026-908076.3A vulnerability was found in nanocoai NanoClaw up to 2.1.17. This issue affects the function forwardAttachedFiles of the file src/modules/ag CVE-2026-908086.3A vulnerability was determined in HKUDS nanobot up to 0.2.1. Impacted is the function ExecTool._guard_command/ExecTool._spawn of the file na CVE-2026-908097.3A vulnerability was identified in HKUDS nanobot up to 0.2.1. The affected element is the function ExecTool._guard_command/ExecTool._spawn of CVE-2026-90817.1IBM Langflow OSS 1.0.0 through 1.10.3, and 1.0.0 through 1.10.3 contains a Server-Side Request Forgery (SSRF) vulnerability in the validate_CVE-2026-908106.3A security flaw has been discovered in cosmicstack-labs mercury-agent up to 1.1.13. The impacted element is the function PermissionManager.c CVE-2026-908113.3A weakness has been identified in cosmicstack-labs mercury-agent up to 1.2.0. This affects the function PermissionManager.checkShellCommand CVE-2026-908124.3A security vulnerability has been detected in cosmicstack-labs mercury-agent up to 1.2.0. This impacts the function checkShellCommand of the