This vulnerability is a heap-based buffer overflow caused by an out-of-bounds read in the bfd linker component of GNU Binutils used in Red Hat Enterprise Linux 10. An attacker can exploit this by convincing a user to process a specially crafted malicious XCOFF object file, potentially leading to sensitive information disclosure or application-level denial of service due to crashes. The CVSS 3.1 score is 6.1, reflecting medium severity with local attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, high confidentiality impact, no integrity impact, and low availability impact.

The vulnerability can lead to disclosure of sensitive information or cause application crashes resulting in denial of service at the application level. It requires local access and user interaction to exploit. There are no known exploits in the wild reported. The impact is limited to confidentiality and availability with no integrity impact.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. The provided vendor advisory content does not explicitly mention a fix or mitigation steps. Users should monitor Red Hat's official security advisories for updates and apply patches once available. Until then, avoid processing untrusted or malicious XCOFF object files to reduce risk.