# CVE-2026-3442: GNU Binutils out-of-bounds read in bfd linker

Source: https://junglewise.ai/threats/cve-2026-3442-gnu-binutils-out-of-bounds-read-in-bfd-linker  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-03-16. Updated: 2026-06-30  
License: CC BY 4.0 with a link back

CVE-2026-3442 · Severity: medium · CVSS 6.1 · Published 2026-03-16

A security vulnerability has been identified in GNU Binutils, a collection of programming tools used to create and manage executable files and libraries. An attacker could exploit this flaw by tricking a user into processing a specially crafted malicious file. If successful, this could allow the attacker to view sensitive information or cause the software to crash, potentially disrupting development workflows or system operations.

Technologies: [Gnu Binutils](https://junglewise.ai/threats/technologies/binutils). Vendors: [Gnu](https://junglewise.ai/threats/vendors/gnu).

## Quick answers

**Is CVE-2026-3442 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-3442 being exploited in the wild.

**How severe is CVE-2026-3442?** Medium severity, with a CVSS score of 6.1, published 16 March 2026.

**Which products and versions are affected?** Gnu Binutils Versions prior to 2.45.1-5.1.hum1.

**Is there a fix for CVE-2026-3442?** A patch was published on 2026-06-30: Red Hat released security update RHSA-2026:33527 Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-3442 attacked?** It is attacked with local access, in a software library.

**Am I affected by CVE-2026-3442?** Check whether you run Gnu Binutils at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

A heap-based buffer overflow, specifically an out-of-bounds read, exists in the Binary File Descriptor (BFD) linker component of GNU Binutils. The flaw is located in 'bfd/xcofflink.c' within the 'xcoff_link_add_symbols' function, where the 'r_symndx' variable is used to index symbol hashes without adequate bounds checking. An attacker can exploit this by providing a specially crafted XCOFF object file to the 'ld' linker. Successful exploitation requires user interaction (processing the malicious file) and can result in information disclosure or an application-level denial of service (crash). Red Hat has released patches for affected components in Red Hat Hardened Images (e.g., binutils-2.45.1-5.1.hum1).

## Affected products

- GNU Binutils Versions prior to 2.45.1-5.1.hum1
- Red Hat Enterprise Linux 6 Affected
- Red Hat Hardened Images Affected

## Timeline

- 2026-03-02: disclosed: Initial report in Red Hat Bugzilla
- 2026-03-16: advisory: NVD publication date
- 2026-06-30: patched: Red Hat released security update RHSA-2026:33527

## References

- [https://catalog.redhat.com/software/containers/](https://catalog.redhat.com/software/containers/)
- [https://access.redhat.com/downloads/content/package-browser/](https://access.redhat.com/downloads/content/package-browser/)
- [https://access.redhat.com/errata/RHSA-2026:33527](https://access.redhat.com/errata/RHSA-2026:33527)
- [https://access.redhat.com/security/cve/CVE-2026-3442](https://access.redhat.com/security/cve/CVE-2026-3442)
- [https://bugzilla.redhat.com/show_bug.cgi?id=2443828](https://bugzilla.redhat.com/show_bug.cgi?id=2443828)

## Related threats

- [GNU Binutils null pointer dereference in dynamic relocation allocation](https://junglewise.ai/threats/cve-2026-91782-gnu-binutils-null-pointer-dereference-in-dynamic-relocation)
- [GNU Binutils null pointer dereference in ELF section handler](https://junglewise.ai/threats/cve-2026-91781-gnu-binutils-null-pointer-dereference-in-elf-section-handler)
- [GNU Binutils null pointer dereference in ELF linker](https://junglewise.ai/threats/cve-2026-91780-gnu-binutils-null-pointer-dereference-in-elf-linker)
- [GNU Binutils null pointer dereference in eh_frame section offset](https://junglewise.ai/threats/cve-2026-91779-gnu-binutils-null-pointer-dereference-in-eh-frame-section-offset)
- [GNU Binutils memory corruption in ELF string table handling](https://junglewise.ai/threats/cve-2026-90831-gnu-binutils-memory-corruption-in-elf-string-table-handling)