← Zuruck zu CVEs
CVE-2026-3442
MEDIUM6.1
Beschreibung
A flaw was found in GNU Binutils. This vulnerability, a heap-based buffer overflow, specifically an out-of-bounds read, exists in the bfd linker component. An attacker could exploit this by convincing a user to process a specially crafted malicious XCOFF object file. Successful exploitation may lead to the disclosure of sensitive information or cause the application to crash, resulting in an application level denial of service.
CVE Details
CVSS v3.1 Bewertung6.1
SchweregradMEDIUM
CVSS VektorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:L
AngriffsvektorLOCAL
KomplexitatLOW
Erforderliche PrivilegienNONE
BenutzerinteraktionREQUIRED
Veroffentlicht3/16/2026
Zuletzt geandert3/20/2026
Quellenvd
Honeypot-Sichtungen0
Betroffene Produkte
gnu:binutilsredhat:enterprise_linuxredhat:openshift_container_platform
Schwachen (CWE)
CWE-125
Referenzen
https://access.redhat.com/security/cve/CVE-2026-3442(secalert@redhat.com)
https://bugzilla.redhat.com/show_bug.cgi?id=2443828(secalert@redhat.com)
IOC Korrelationen
Keine Korrelationen erfasst
This product uses data from the NVD API but is not endorsed or certified by the NVD.