CVE-2026-90803

A security vulnerability has been detected in GNU Binutils 2.47. Affected by this vulnerability is the function elf_x86_64_relocate_section of the file bfd/elf64-x86-64.c of the component ld. Such manipulation of the argument roff leads to buffer overflow. An attack has to be approached locally. The exploit has been disclosed publicly and may be used. Upgrading to version 2.48 addresses this issue. The name of the patch is 471130b39c03623ec6d78ece377ff4da3f6bfe7b. It is recommended to upgrade the affected component.

• CWE-119
• CWE-120

• https://github.com/r1ck9-2q/cve_summit/blob/main/Heap%20OOB%20readwrite%20and%20SEGV%20in%20%60elf_x86_64_relocate_section%60%20(bfdelf64-x86-64.c4530%20%204835)%20via%20malformed%20relocation.md
• https://sourceware.org/bugzilla/show_bug.cgi?id=34444
• https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=471130b39c03623ec6d78ece377ff4da3f6bfe7b
• https://vuldb.com/cve/CVE-2026-90803
• https://vuldb.com/submit/920280
• https://vuldb.com/vuln/403305
• https://vuldb.com/vuln/403305/cti
• https://www.gnu.org/

Published

Sep 14, 2026

Last Modified

Sep 14, 2026

Status

Awaiting Analysis

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-90794A vulnerability was found in GPAC up to f1219cde. The affect…6.3
• CVE-2026-90795A vulnerability was determined in itsourcecode Loan Manageme…4.3
• CVE-2026-90796A vulnerability was identified in itsourcecode Leave Managem…6.3
• CVE-2026-9080Calling `curl_easy_pause()` within the event-based `CURLMOPT…7.3
• CVE-2026-90801A security flaw has been discovered in GNU Binutils 2.47. Th…5.3
• CVE-2026-90802A weakness has been identified in GNU Binutils 2.47. Affecte…4.4
• CVE-2026-90804A vulnerability was detected in GNU Binutils 2.47. Affected …4.8
• CVE-2026-90805A flaw has been found in subhajitkhan online-clinic-manageme…7.3
• CVE-2026-90806A vulnerability has been found in DjangoCRM django-crm up to…6.3
• CVE-2026-90807A vulnerability was found in nanocoai NanoClaw up to 2.1.17.…6.3
• CVE-2026-90808A vulnerability was determined in HKUDS nanobot up to 0.2.1.…6.3
• CVE-2026-90809A vulnerability was identified in HKUDS nanobot up to 0.2.1.…7.3