CVE-2026-91782

A vulnerability was detected in GNU Binutils 2.47. Affected by this vulnerability is the function elf_x86_allocate_dynrelocs of the file bfd/elfxx-x86.c of the component Dynamic Relocation Allocation. The manipulation results in null pointer dereference. The attack requires a local approach. The exploit is now public and may be used. Upgrading to version 2.48 addresses this issue. The patch is identified as d1268210b6f6/471130b39c0/283d3198bed/0a84e560216/a692a633d40. Upgrading the affected component is recommended.

Database specific

{
    "cna_assigner":  "VulDB",
    "cwe_ids":  [
        "CWE-404",
        "CWE-476"
    ],
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/91xxx/CVE-2026-91782.json",
    "unresolved_ranges":  [
        {
            "extracted_events":  [
                {
                    "range":  [
                        {
                            "introduced":  "2.47"
                        },
                        {
                            "last_affected":  "2.47"
                        }
                    ],
                    "source":  "AFFECTED_FIELD",
                    "strategy":  "StandaloneSingleVersion"
                }
            ]
        }
    ]
}

References

Affected packages

Git / sourceware.org/git/binutils-gdb.git

Affected ranges

Type

GIT

Repo

https://sourceware.org/git/binutils-gdb.git

Events

Introduced

6ce87bbc521cf46eaee9a1f7ef61cee2cdfb3e32

Last Affected

6ce87bbc521cf46eaee9a1f7ef61cee2cdfb3e32

Database specific

Show details

{
    "extracted_events":  [
        {
            "cpe":  "cpe:2.3:a:gnu:binutils:2.47:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.47"
                },
                {
                    "last_affected":  "2.47"
                }
            ],
            "source":  "CPE_STRING"
        }
    ]
}

Affected versions

2.*

2.47

Other

binutils-2_47

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-91782.json"