Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

Buy Us a Coffee

CVE-2026-91781— GNU Binutils ELF Section elf64-x86-64.c elf_x86_64_common_section_index null pointer dereference

Quick assessment

Affected

GNU Binutils

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

在 GNU Binutils 2.47 中发现了一个安全漏洞。受影响的函数是，位于文件中，属于“ELF 段处理器”组件。该操作会导致空指针解引用（null pointer dereference）。此漏洞的利用需通过本地方式执行。该漏洞的利用方法已公开披露，可能已被利用。升级到版本 2.48 可以解决此问题。补丁标识符为。建议升级受影响的组件。

CVSS 3.3 · Low Updated Sep 15, 2026

Possible ATT&CK Techniques 3 AI

T1055 · Process Injection T1059 · Command and Scripting Interpreter T1190 · Exploit Public-Facing Application

Get alerts for future matching vulnerabilities Log in to subscribe

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

GNU Binutils ELF Section elf64-x86-64.c elf_x86_64_common_section_index null pointer dereference

Source: CVE Program / CVE List V5

Vulnerability Description

A security vulnerability has been detected in GNU Binutils 2.47. Affected is the function elf_x86_64_common_section_index of the file bfd/elf64-x86-64.c of the component ELF Section Handler. The manipulation leads to null pointer dereference. The attack needs to be performed locally. The exploit has been disclosed publicly and may be used. Upgrading to version 2.48 is able to address this issue. The identifier of the patch is 7322e9bc30cb282575a701c307851fd3d66fee68. It is suggested to upgrade the affected component.

Source: CVE Program / CVE List V5

CVSS Information

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Source: CVE Program / CVE List V5

Vulnerability Type

空指针解引用

Source: CVE Program / CVE List V5

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
GNU	Binutils	2.47	`cpe:2.3:a:gnu:binutils::::::::`

II. Public POCs for CVE-2026-91781

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2026-91781

请登录查看更多情报信息。

Same Patch Batch · GNU · 2026-09-15 · 5 CVEs total

CVE-2026-91752	7.5 HIGH	GNU libextractor before 1.15 Stack Overflow via OLE2
CVE-2026-91779	3.3 LOW	GNU Binutils Eh Frame elf-eh-frame.c _bfd_elf_eh_frame_section_offset null pointer derefer
CVE-2026-91780	3.3 LOW	GNU Binutils elflink.c elf_link_add_object_symbols null pointer dereference
CVE-2026-91782	3.3 LOW	GNU Binutils Dynamic Relocation Allocation elfxx-x86.c elf_x86_allocate_dynrelocs null poi

IV. Related Vulnerabilities

Same product: Binutils

Same vendor: GNU

Same weakness: CWE-476

V. Comments for CVE-2026-91781

No comments yet

Goal Reached Thanks to every supporter — we hit 100%!

CVE-2026-91781— GNU Binutils ELF Section elf64-x86-64.c elf_x86_64_common_section_index null pointer dereference

Quick assessment

Possible ATT&CK Techniques 3 AI

I. Basic Information for CVE-2026-91781

Vulnerability Information

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Affected Products

II. Public POCs for CVE-2026-91781

III. Intelligence Information for CVE-2026-91781

Patches & Fixes for CVE-2026-91781 (2)

Proof of Concept for CVE-2026-91781 (1)

Vendor Pages for CVE-2026-91781 (1)

Same Patch Batch · GNU · 2026-09-15 · 5 CVEs total

IV. Related Vulnerabilities

V. Comments for CVE-2026-91781

Leave a comment