A vulnerability was detected in GNU Binutils 2.47. (CVE-2026-90831)
A vulnerability was detected in GNU Binutils 2.47. The affected element is the function _bfd_elf_strtab_delref of the file bfd/elf-strtab.c of the component ELF String Table. The manipulation results in memory corruption. The attack requires a local approach. The exploit is now public and may be used. The project was informed of the problem early through a bug report but has not responded yet.
AI Analysis
Technical Summary
CVE-2026-90831 is a memory corruption vulnerability in the _bfd_elf_strtab_delref function within the ELF String Table component of GNU Binutils version 2.47. The issue arises from improper manipulation of memory, potentially leading to corruption. Exploitation requires local access, and public exploit code exists. The vulnerability was reported early to the project, but no official response or patch has been provided as of the publication date.
Potential Impact
Successful exploitation can lead to memory corruption, affecting confidentiality, integrity, and availability to a limited extent. The attack requires local privileges, reducing the risk of remote exploitation. The availability of public exploit code increases the risk of local attacks, but the overall severity remains low.
Mitigation Recommendations
No official fix or patch is currently available. Users should monitor the vendor's advisory channels for updates. Until a patch is released, limit local access to trusted users only and consider applying additional local security controls to mitigate exploitation risk.
A vulnerability was detected in GNU Binutils 2.47. (CVE-2026-90831)
Description
A vulnerability was detected in GNU Binutils 2.47. The affected element is the function _bfd_elf_strtab_delref of the file bfd/elf-strtab.c of the component ELF String Table. The manipulation results in memory corruption. The attack requires a local approach. The exploit is now public and may be used. The project was informed of the problem early through a bug report but has not responded yet.
CVSS v3.1
Score 5.3medium
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-90831 is a memory corruption vulnerability in the _bfd_elf_strtab_delref function within the ELF String Table component of GNU Binutils version 2.47. The issue arises from improper manipulation of memory, potentially leading to corruption. Exploitation requires local access, and public exploit code exists. The vulnerability was reported early to the project, but no official response or patch has been provided as of the publication date.
Potential Impact
Successful exploitation can lead to memory corruption, affecting confidentiality, integrity, and availability to a limited extent. The attack requires local privileges, reducing the risk of remote exploitation. The availability of public exploit code increases the risk of local attacks, but the overall severity remains low.
Mitigation Recommendations
No official fix or patch is currently available. Users should monitor the vendor's advisory channels for updates. Until a patch is released, limit local access to trusted users only and consider applying additional local security controls to mitigate exploitation risk.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-fjw7-r654-jjmq
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-90831"]
- Database Specific Severity
- LOW
- Cvss Version
- 3.1
- State
- PUBLISHED
Threat ID: 6aa8a16055bf5e2cf5f3b6e5
Added to database: 09/15/2026, 01:37:36 UTC
Last enriched: 09/15/2026, 01:40:23 UTC
Last updated: 09/15/2026, 07:01:22 UTC
Views: 4
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.