Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
5.6
CVE-2026-15003: GNU Binutils: Malicious File Can Crash Linker and Leak Data
CVE-2026-15003 · published 3 months ago
Summary
The GNU Binutils linker can crash or leak sensitive information if it processes a specially crafted file. This can happen if an attacker provides a malicious file to the linker, potentially revealing confidential data or causing the system to become unavailable. To protect against this, ensure that the linker is updated with the latest security patches.
What to do
- Update debian binutils to version 2.47-1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Debian:11 | debian | binutils | All versions |
| Debian:12 | debian | binutils | All versions |
| Debian:13 | debian | binutils | All versions |
| Debian:14 | debian | binutils |
< 2.47-1 Fix: upgrade to 2.47-1
|
| – | red hat | red hat enterprise linux 6 | All versions |
| – | red hat | red hat enterprise linux 7 | All versions |
| – | red hat | red hat enterprise linux 10 | All versions |
| – | red hat | red hat enterprise linux 8 | All versions |
| – | red hat | red hat enterprise linux 9 | All versions |
| – | red hat | red hat hardened images | All versions |
| – | red hat | red hat openshift container platform 4 | All versions |
| Ubuntu:Pro:14.04:LTS | canonical | binutils | All versions |
Original advisory text
Binutils: gnu binutils: heap-buffer-overflow in linker leads to information disclosure and denial of service
A flaw was found in the GNU Binutils (Binary Utilities) linker. This vulnerability, a heap-buffer-overflow read (CWE-125), occurs when the linker processes a specially crafted 32-bit XCOFF (Extended Common Object File Format) object file. An attacker could exploit this by providing a malicious file, leading to an out-of-bounds read of memory. This can result in information disclosure, potentially revealing sensitive heap data, and a Denial of Service (DoS) due to the linker crashing.
References
- https://access.redhat.com/errata/RHSA-2026:47171
- https://security-tracker.debian.org/tracker/CVE-2026-15003 Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2026-15003
- https://bugzilla.redhat.com/show_bug.cgi?id=2497805
- https://sourceware.org/bugzilla/show_bug.cgi?id=34053
- https://ubuntu.com/security/CVE-2026-15003 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-15003 Third Party Advisory
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker partial control
Type
CWE-125Out-of-bounds Read
Timeline
Published27 Jul 2026
Updated26 Oct 2026
First seen27 Jul 2026
Sources
DEBIAN-CVE-2026-15003 · OSV
CVE-2026-15003 · NVD
CVE-2026-15003 · MITRE
UBUNTU-CVE-2026-15003 · OSV
Track software like this
Free during beta