CVE-2026-90831

A vulnerability was detected in GNU Binutils 2.47. The affected element is the function _bfd_elf_strtab_delref of the file bfd/elf-strtab.c of the component ELF String Table. The manipulation results in memory corruption. The attack requires a local approach. The exploit is now public and may be used. The project was informed of the problem early through a bug report but has not responded yet.

  • Published Sep 14, 2026
  • CVSS 1.9 low
  • 0.2% chance of exploitation in the next 30 days (EPSS)

Affected software

CVE-2026-90831 at the National Vulnerability Database