Reference page — cumulative record through Sunday, October 4, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
CVE-2026-90804
GNU Binutils Eh Frame Section elf-eh-frame.c _bfd_elf_write_section_eh_frame buffer overflow
AV AC AT PR UI VC VI VA CVSS EPSS %ile KEV
L L N L P L L L 0.9 .0020 8.5 —
AFFECTED
Product Versions Fixed
Binutils 2.47 – —
TIMELINE
Sep 13 Reserved by VulDB
Sep 14 Published (CNA: VulDB)
Sep 15 EXPLOIT PUBLISHED — CVE-2026-90804 (GNU Binutils). Public exploit reference added.
Sep 18 EXPLOIT PUBLISHED — CVE-2026-90804 (GNU Binutils). Public exploit reference added.
Description
A vulnerability was detected in GNU Binutils 2.47. Affected by this issue is the function _bfd_elf_write_section_eh_frame of the file bfd/elf-eh-frame.c of the component Eh Frame Section Handler. Performing a manipulation of the argument cie_length/fde_length/augmentation_data_size/write_offset results in buffer overflow. Attacking locally is a requirement. The exploit is now public and may be used. The project was informed of the problem early through a bug report but has not responded yet.
Lifecycle
Complete event history — 4 events, chronological
| Date | Event | Detail |
|---|
| September 13, 2026 | Reserved | Reserved by VulDB |
| September 14, 2026 | Published | Published (CNA: VulDB) |
| September 15, 2026 | EXPLOIT PUBLISHED | EXPLOIT PUBLISHED — CVE-2026-90804 (GNU Binutils). Public exploit reference added. |
| September 18, 2026 | EXPLOIT PUBLISHED | EXPLOIT PUBLISHED — CVE-2026-90804 (GNU Binutils). Public exploit reference added. |
Affected
Affected products and packages — 1 row
| Vendor | Product / Package | Ecosystem | Version introduced | Fixed |
|---|
| GNU | Binutils | — | 2.47 | — |
References (7)
- https://github.com/r1ck9-2q/cve_summit/blob/main/Heap%20OOB%20write%20%20negative-size%20%60memmove%60%20%20SEGV%20in%20%60_bfd_elf_write_section_eh_frame%60%20(bfdelf-eh-frame.c2064%20%202083%20%202193)%20via%20malformed%20%60.eh_frame%60.md [Exploit, Mitigation, Third Party Advisory]
- https://sourceware.org/bugzilla/show_bug.cgi?id=34445 [Exploit, Third Party Advisory]
- https://vuldb.com/cve/CVE-2026-90804 [Third Party Advisory, VDB Entry]
- https://vuldb.com/submit/920281 [Exploit, Third Party Advisory, VDB Entry]
- https://vuldb.com/vuln/403306 [Permissions Required, Third Party Advisory, VDB Entry]
- https://vuldb.com/vuln/403306/cti [Permissions Required, Third Party Advisory, VDB Entry]
- https://www.gnu.org/ [Product]
About this page
This is a reference page, not a dated page of record. It assembles the complete lifecycle of CVE-2026-90804 from the CVE Program record, NVD enrichment, the CISA KEV catalog, EPSS, and OSV advisories. The box score's numbers (CVSS, EPSS, KEV status) are current as of Sunday, October 4, 2026 UTC and are re-derived as the archive grows; only dated daily editions are immutable pages of record. The authoritative source for this identifier is cve.org.
