Quick answers
- Is CVE-2026-90804 exploited in the wild?
- No. Junglewise Threat Intelligence has no report of CVE-2026-90804 being exploited in the wild.
- How severe is CVE-2026-90804?
- Medium severity, with a CVSS score of 4.8, published 14 September 2026.
- Which products and versions are affected?
- Gnu Binutils 2.47.
- Is there a fix for CVE-2026-90804?
- No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
- How is CVE-2026-90804 attacked?
- It is attacked with local access.
- Am I affected by CVE-2026-90804?
- Check whether you run Gnu Binutils at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.
Technical details
This is a heap out-of-bounds (OOB) write vulnerability affecting the _bfd_elf_write_section_eh_frame function in bfd/elf-eh-frame.c. The vulnerability is triggered via malformed .eh_frame sections that manipulate arguments such as cie_length, fde_length, augmentation_data_size, or write_offset, causing a negative-size memmove operation. Local access and the ability to supply a malicious binary object file are required to trigger the vulnerability. An attacker can cause a denial of service (SEGV crash) or potentially achieve local code execution. The vendor was notified early but has not yet issued a patch at the time of public disclosure.
Affected products
- GNU Binutils 2.47
Timeline
- 2026-09-14: disclosed
- <UNKNOWN>: exploited: Public exploit code available