SEPTEMBER 17, 2026
Live Feed
Back to database
Case File

CVE-2026-91779

LOW · CVSS 3.3 EPSS 0.11% Public Exploit

Source: NVD + CISA KEV + EPSS · Published 2026-09-15 · Last synced 2026-09-17

CyberRota Analysis

AI-Generated

A vulnerability exists in the Eh Frame Handler of GNU Binutils 2.47, specifically in the _bfd_elf_eh_frame_section_offset function, leading to a null pointer dereference. This flaw requires local access to exploit, potentially allowing an attacker to disrupt operations or crash the application. Users of GNU Binutils, particularly those in environments where local access is possible, should prioritize addressing this issue despite its low severity rating.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Detected Signals
exploit
GitHub PoC Links

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-91779
Severity
LOW
CVSS
3.3
EPSS
0.11%

Original NVD Description

A security flaw has been discovered in GNU Binutils 2.47. This affects the function _bfd_elf_eh_frame_section_offset of the file bfd/elf-eh-frame.c of the component Eh Frame Handler. Performing a manipulation results in null pointer dereference. The attack must be initiated from a local position. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through a bug report but has not responded yet.

Related CVEs

Other vulnerabilities affecting the same vendor(s)