This vulnerability exists in the bfd linker component of GNU Binutils on Red Hat Enterprise Linux 10. It is a heap-based buffer overflow caused by an out-of-bounds read when processing maliciously crafted XCOFF object files. An attacker could exploit this by convincing a user to process such a file, potentially leading to sensitive information disclosure or application crashes resulting in denial of service. The attack vector requires local access with low privileges and user interaction. The CVSS vector indicates low attack complexity and no privileges required but user interaction is needed. The impact affects confidentiality and availability but not integrity.

The vulnerability can lead to disclosure of sensitive information or cause the affected application to crash, resulting in an application-level denial of service. There is no indication of integrity compromise. The attack requires local access and user interaction. No known exploits in the wild have been reported at this time.

Patch status is not yet confirmed — check the Red Hat advisory at https://access.redhat.com/security/cve/CVE-2026-3442 for current remediation guidance. Until a patch is applied, avoid processing untrusted or malicious XCOFF object files. No vendor advisory content explicitly states that no action is required or that the issue is already mitigated.