CVE-2026-6844 | BDVDB-2026-328313 Detail

Description#

A flaw was found in the `readelf` utility of the binutils package. A local attacker could exploit two Denial of Service (DoS) vulnerabilities by providing a specially crafted Executable and Linkable Format (ELF) file. One vulnerability, a resource exhaustion (CWE-400), can lead to an out-of-memory condition. The other, a null pointer dereference (CWE-476), can cause a segmentation fault. Both issues can result in the `readelf` utility becoming unresponsive or crashing, leading to a denial of service.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12026-04-22Record published in the CVE List.
2. Version 22026-11-06Most recent update recorded in the CVE List.