Log in Start free

Vulnerability · Published Apr 22, 2026 · Assigned by redhat

CVE-2026-6846Binutils: binutils: arbitrary code execution via malformed xcoff object file processing

High 7.8

In plain English

A high-severity heap buffer overflow in binutils. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 7% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)7.8High
Exploit odds (30 days)0.2%top 93.5% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

A flaw was found in binutils. A heap-buffer-overflow vulnerability exists when processing a specially crafted XCOFF (Extended Common Object File Format) object file during linking. A local attacker could trick a user into processing this malicious file, which could lead to arbitrary code execution, allowing the attacker to run unauthorized commands, or cause a denial of service, making the system unavailable.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12binutilsno fix listedDEBIAN-CVE-2026-6846
Debian:13binutilsno fix listedDEBIAN-CVE-2026-6846
Debian:14binutils2.47-1DEBIAN-CVE-2026-6846
Ubuntu:22.04:LTSbinutilsno fix listedUBUNTU-CVE-2026-6846
Ubuntu:24.04:LTSbinutilsno fix listedUBUNTU-CVE-2026-6846
Ubuntu:25.10binutilsno fix listedUBUNTU-CVE-2026-6846
Ubuntu:26.04:LTSbinutilsno fix listedUBUNTU-CVE-2026-6846
Ubuntu:26.10binutilsno fix listedUBUNTU-CVE-2026-6846

Affected products (as reported)

VendorProductVersions
binutils 0 – before 2.47
Red Hat Red Hat Hardened Images see references
Red Hat Red Hat Hardened Images see references
Red Hat Red Hat Enterprise Linux 10 see references
Red Hat Red Hat Enterprise Linux 10 see references
Red Hat Red Hat Enterprise Linux 10 see references
Red Hat Red Hat Enterprise Linux 10 see references
Red Hat Red Hat Enterprise Linux 6 see references
Red Hat Red Hat Enterprise Linux 7 see references
Red Hat Red Hat Enterprise Linux 7 see references
Red Hat Red Hat Enterprise Linux 8 see references
Red Hat Red Hat Enterprise Linux 8 see references
Red Hat Red Hat Enterprise Linux 8 see references
Red Hat Red Hat Enterprise Linux 8 see references
Red Hat Red Hat Enterprise Linux 8 see references
Red Hat Red Hat Enterprise Linux 8 see references
Red Hat Red Hat Enterprise Linux 8 see references
Red Hat Red Hat Enterprise Linux 9 see references
Red Hat Red Hat Enterprise Linux 9 see references
Red Hat Red Hat Enterprise Linux 9 see references
Red Hat Red Hat Enterprise Linux 9 see references
Red Hat Red Hat Enterprise Linux 9 see references
Red Hat Red Hat OpenShift Container Platform 4 see references
Red Hat Red Hat OpenShift Container Platform 4 see references

Weakness: CWE-122 · Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

References