← Volver a CVEs
CVE-2026-3442
MEDIUM6.1
Descripcion
A flaw was found in GNU Binutils. This vulnerability, a heap-based buffer overflow, specifically an out-of-bounds read, exists in the bfd linker component. An attacker could exploit this by convincing a user to process a specially crafted malicious XCOFF object file. Successful exploitation may lead to the disclosure of sensitive information or cause the application to crash, resulting in an application level denial of service.
Detalles CVE
Puntuacion CVSS v3.16.1
SeveridadMEDIUM
Vector CVSSCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:L
Vector de ataqueLOCAL
ComplejidadLOW
Privilegios requeridosNONE
Interaccion usuarioREQUIRED
Publicado3/16/2026
Ultima modificacion3/20/2026
Fuentenvd
Avistamientos honeypot0
Productos afectados
gnu:binutilsredhat:enterprise_linuxredhat:openshift_container_platform
Debilidades (CWE)
CWE-125
Referencias
https://access.redhat.com/security/cve/CVE-2026-3442(secalert@redhat.com)
https://bugzilla.redhat.com/show_bug.cgi?id=2443828(secalert@redhat.com)
Correlaciones IOC
Sin correlaciones registradas
This product uses data from the NVD API but is not endorsed or certified by the NVD.