Description (CNA)
A flaw was found in GNU Binutils. This heap-based buffer overflow vulnerability, specifically an out-of-bounds read in the bfd linker, allows an attacker to gain access to sensitive information. By convincing a user to process a specially crafted XCOFF object file, an attacker can trigger this flaw, potentially leading to information disclosure or an application level denial of service.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Red Hat / Red Hat Hardened Images | unaffected 2.45.1-5.1.hum1 before * |
| Red Hat / Red Hat Hardened Images | unaffected 2.46.1-1.hum1 before * |
| Red Hat / Red Hat Enterprise Linux 10 | unaffected |
| Red Hat / Red Hat Enterprise Linux 10 | unaffected |
| Red Hat / Red Hat Enterprise Linux 10 | unaffected |
| Red Hat / Red Hat Enterprise Linux 10 | unaffected |
| Red Hat / Red Hat Enterprise Linux 6 | affected |
| Red Hat / Red Hat Enterprise Linux 7 | unaffected |
| Red Hat / Red Hat Enterprise Linux 7 | unaffected |
| Red Hat / Red Hat Enterprise Linux 8 | unaffected |
| Red Hat / Red Hat Enterprise Linux 8 | unaffected |
| Red Hat / Red Hat Enterprise Linux 8 | unaffected |
| Red Hat / Red Hat Enterprise Linux 8 | unaffected |
| Red Hat / Red Hat Enterprise Linux 8 | unaffected |
| Red Hat / Red Hat Enterprise Linux 8 | unaffected |
| Red Hat / Red Hat Enterprise Linux 8 | unaffected |
| Red Hat / Red Hat Enterprise Linux 9 | unaffected |
| Red Hat / Red Hat Enterprise Linux 9 | unaffected |
| Red Hat / Red Hat Enterprise Linux 9 | unaffected |
| Red Hat / Red Hat Enterprise Linux 9 | unaffected |
| Red Hat / Red Hat Enterprise Linux 9 | unaffected |
| Red Hat / Red Hat OpenShift Container Platform 4 | unaffected |
| Red Hat / Red Hat OpenShift Container Platform 4 | unaffected |
CWE
CWE-125
References
- https://access.redhat.com/errata/RHSA-2026:33527
- https://access.redhat.com/errata/RHSA-2026:39022
- https://access.redhat.com/security/cve/CVE-2026-3441
- https://bugzilla.redhat.com/show_bug.cgi?id=2443826
ADP enrichment
No English description supplied.
No references supplied.