CVE-2026-3441: Out-of-bounds Read in Red Hat Red Hat Hardened Images
A flaw was found in GNU Binutils. This heap-based buffer overflow vulnerability, specifically an out-of-bounds read in the bfd linker, allows an attacker to gain access to sensitive information. By convincing a user to process a specially crafted XCOFF object file, an attacker can trigger this flaw, potentially leading to information disclosure or an application level denial of service.
AI Analysis
Technical Summary
This vulnerability in GNU Binutils, specifically in the bfd linker, involves a heap-based buffer overflow that results in an out-of-bounds read. An attacker can exploit this by convincing a user to process a maliciously crafted XCOFF object file, which may lead to sensitive information disclosure or cause an application-level denial of service. Red Hat has issued security advisories RHSA-2026:33527 and RHSA-2026:39022 providing updated binutils packages (versions 2.45.1-5.1.hum1 and 2.46.1-1.hum1) that fix this vulnerability along with others.
Potential Impact
Successful exploitation can lead to disclosure of sensitive information due to out-of-bounds reads and may cause application-level denial of service. The CVSS 3.1 base score is 6.1 (medium severity), reflecting the local attack vector requiring user interaction and limited privileges, with high confidentiality impact and low availability impact.
Mitigation Recommendations
Red Hat has released official security updates for Red Hat Hardened Images that include patched binutils packages addressing CVE-2026-3441. Users should apply these updates promptly by following instructions at https://images.redhat.com/. No other mitigation actions are specified or required beyond applying the official patches.
CVE-2026-3441: Out-of-bounds Read in Red Hat Red Hat Hardened Images
Description
A flaw was found in GNU Binutils. This heap-based buffer overflow vulnerability, specifically an out-of-bounds read in the bfd linker, allows an attacker to gain access to sensitive information. By convincing a user to process a specially crafted XCOFF object file, an attacker can trigger this flaw, potentially leading to information disclosure or an application level denial of service.
CVSS v3.1
Score 6.1medium
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability in GNU Binutils, specifically in the bfd linker, involves a heap-based buffer overflow that results in an out-of-bounds read. An attacker can exploit this by convincing a user to process a maliciously crafted XCOFF object file, which may lead to sensitive information disclosure or cause an application-level denial of service. Red Hat has issued security advisories RHSA-2026:33527 and RHSA-2026:39022 providing updated binutils packages (versions 2.45.1-5.1.hum1 and 2.46.1-1.hum1) that fix this vulnerability along with others.
Potential Impact
Successful exploitation can lead to disclosure of sensitive information due to out-of-bounds reads and may cause application-level denial of service. The CVSS 3.1 base score is 6.1 (medium severity), reflecting the local attack vector requiring user interaction and limited privileges, with high confidentiality impact and low availability impact.
Mitigation Recommendations
Red Hat has released official security updates for Red Hat Hardened Images that include patched binutils packages addressing CVE-2026-3441. Users should apply these updates promptly by following instructions at https://images.redhat.com/. No other mitigation actions are specified or required beyond applying the official patches.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- redhat
- Date Reserved
- 2026-03-02T14:08:59.315Z
- Cvss Version
- 3.1
- State
- PUBLISHED
- Vendor Advisory Urls
- [{"url":"https://access.redhat.com/security/cve/CVE-2026-3441","vendor":"Red Hat"}]
Threat ID: 69b604929b0f87e88177d6e3
Added to database: 03/15/2026, 01:00:02 UTC
Last enriched: 07/14/2026, 07:56:30 UTC
Last updated: 07/31/2026, 19:22:58 UTC
Views: 165
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.