CVE-2026-19582
UnknownCVSS 0.0Exploitation Probability (EPSS)
Low risk11th percentile - higher than 11% of all known CVEs
Summary
In binutils 2.46.1 and prior versions, a victim who opens a crafted PE file using binutils could execute arbitrary code unknowingly via a stack buffer overflow out of bounds write.
Risk Assessment
A user opening a malicious PE file may expose the system to unauthorized code execution, potentially leading to full system compromise.
Recommendation
It is recommended to upgrade binutils to the latest available version that includes a fix for this vulnerability.
Other vulnerabilities in binutils
See all- CVE-2026-6846High
A heap-buffer-overflow vulnerability was found in binutils when processing a specially crafted XCOFF object file during linking. A local attacker could trick a user into processing this malicious file, leading to arbitrary code execution or denial of service.
- CVE-2026-6845Medium
A flaw was found in binutils, specifically within the `readelf` utility, allowing a local attacker to cause a Denial of Service (DoS) by tricking a user into processing a specially crafted ELF file. Exploitation can lead to excessive resource consumption or a program crash, making the system unresponsive.
- CVE-2026-6844Medium
A flaw was found in the readelf utility of the binutils package. A local attacker could exploit two Denial of Service (DoS) vulnerabilities by providing a specially crafted ELF file. One vulnerability, a resource exhaustion (CWE-400), can lead to an out-of-memory condition. The other, a null pointer dereference (CWE-476), can cause a segmentation fault. Both issues can result in the readelf utility becoming unresponsive or crashing.
Original NVD description (English source)
In binutils 2.46.1 and prior versions, a victim who opens a crafted PE file using binutils could execute arbitrary code unknowningly via a stack buffer overflow out of bounds write.