AZL-108066
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-108066.json
- JSON Data
- https://api.osv.dev/v1/vulns/AZL-108066
- Upstream
- Published
- 2026-09-14T17:17:56Z
- Modified
- 2026-10-15T14:16:40Z
- Summary
- CVE-2026-90801 affecting package crash 9.0.0-3
- Details
-
A security flaw has been discovered in GNU Binutils 2.47. This impacts the function cache_bwrite of the file bfd/cache.c of the component ld. The manipulation of the argument nbytes results in buffer overflow. The attack requires a local approach. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through a bug report but has not responded yet.
- References