A flaw was found in the GNU Binutils (Binary Utilities) linker. This vulnerability, a heap-buffer-overflow read (CWE-125), occurs when the linker processes a specially crafted 32-bit XCOFF (Extended Common Object File Format) object file. An attacker could exploit this by providing a malicious file, leading to an out-of-bounds read of memory. This can result in information disclosure, potentially revealing sensitive heap data, and a Denial of Service (DoS) due to the linker crashing.

A flaw was found in the GNU Binutils (Binary Utilities) linker. This vulnerability, a heap-buffer-overflow read (CWE-125), occurs when the linker processes a specially crafted 32-bit XCOFF (Extended Common Object File Format) object file. An attacker could exploit this by providing a malicious file, leading to an out-of-bounds read of memory. This can result in information disclosure, potentially revealing sensitive heap data, and a Denial of Service (DoS) due to the linker crashing.

Affected: openEuler:24.03-LTS-SP4: gdb

GDB, the GNU Project debugger, allows you to see what is going on inside another program while it executes -- or what another program was doing at the moment it crashed. Security Fix(es):

A flaw was found in the GNU Binutils (Binary Utilities) linker. This vulnerability, a heap-buffer-overflow read (CWE-125), occurs when the linker processes a specially crafted 32-bit XCOFF (Extended Common Object File Format) object file. An attacker could exploit this by providing a malicious file, leading to an out-of-bounds read of memory. This can result in information disclosure, potentially revealing sensitive heap data, and a Denial of Service (DoS) due to the linker crashing.(CVE-2026-15003)

binutils-2.47-1.1 on GA media

binutils: GNU Binutils: Heap-buffer-overflow in linker leads to information disclosure and denial of service binutils: GNU Binutils ld: Buffer overflow in cache_bwrite via nbytes manipulation binutils: GNU Binutils: Denial of service via null pointer dereference in ld component binutils: GNU Binutils ld: Buffer Overflow via Malformed Relocation binutils: GNU Binutils: Buffer overflow in Eh Frame Section Handler can lead to denial of service binutils: GNU Binutils: Null pointer dereference via elf_orphan_compatible function binutils: GNU Binutils: Null pointer dereference via SHT_GROUP Section manipulation binutils: GNU Binutils: Local denial of service via null pointer dereference in Section Merge binutils: GNU Binutils: Memory corruption via local manipulation of ELF String Table

Affected: Ubuntu:Pro:14.04:LTS: binutils, Ubuntu:Pro:16.04:LTS: binutils, Ubuntu:Pro:18.04:LTS: binutils, Ubuntu:Pro:20.04:LTS: binutils, Ubuntu:22.04:LTS: binutils, Ubuntu:24.04:LTS: binutils, Ubuntu:26.04:LTS: binutils

A flaw was found in the GNU Binutils (Binary Utilities) linker. This vulnerability, a heap-buffer-overflow read (CWE-125), occurs when the linker processes a specially crafted 32-bit XCOFF (Extended Common Object File Format) object file. An attacker could exploit this by providing a malicious file, leading to an out-of-bounds read of memory. This can result in information disclosure, potentially revealing sensitive heap data, and a Denial of Service (DoS) due to the linker crashing.

Ein lokaler Angreifer kann eine Schwachstelle in binutils ausnutzen, um einen Denial of Service Angriff durchzuführen und Daten offenzulegen.