A flaw was found in binutils.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

1. Apr 22, 2026 · NIST NVD

   Detected

   A flaw was found in binutils. A heap-buffer-overflow vulnerability exists when processing a specially crafted XCOFF (Extended Common Object File Format) object file during linking. A local attacker could trick a user into processing this malicious file, which could lead to arbitrary code execution, allowing the attacker to run unauthorized commands, or cause a denial of service, making the system

2. Sep 1, 2026 · NIST NVD

   Updated

   A flaw was found in binutils. A heap-buffer-overflow vulnerability exists when processing a specially crafted XCOFF (Extended Common Object File Format) object file during linking. A local attacker could trick a user into processing this malicious file, which could lead to arbitrary code execution, allowing the attacker to run unauthorized commands, or cause a denial of service, making the system

Affected

• cpe gnu/binutilsversion unspecified
• cpe redhat/enterprise linux10.0
• cpe redhat/enterprise linux6.0
• cpe redhat/enterprise linux8.0
• cpe redhat/enterprise linux9.0
• cpe redhat/hardened imagesversion unspecified
• cpe redhat/openshift container platform4.0

Sources

• CVE.orgVulnerability recordCVE-2026-6846

  Official CVE identifier

  cve.org
• NIST NVDVulnerability recordCVE-2026-6846

  A flaw was found in binutils. A heap-buffer-overflow vulnerability exists when processing a specially crafted XCOFF (Extended Common Object File Format) object file during linking. A local attacker could trick a user into processing this malicious file, which could lead to arbitr

  nvd.nist.gov

References

• Reference · access.redhat.com
• Reference · access.redhat.com
• Third Party Advisory · access.redhat.com
• Issue Tracking · bugzilla.redhat.com
• Reference · security.access.redhat.com