Report: CVE-2026-6844 - Binutils: binutils: denial of service vulnerabilities in readelf via crafted elf

Report: CVE-2026-6844 - Binutils: binutils: denial of service vulnerabilities in readelf via crafted elf

CVE ID :CVE-2026-6844 Published : 22 Apr 2026, 8:37 a.m. | 28 minutes ago Description :A flaw was found in the `readelf` utility of the binutils package. A local attacker could exploit two Denial of Service (DoS) vulnerabilities by providing a specially crafted Executable and Linkable Format (ELF) file. One vulnerability, a resource exhaustion (CWE-400), can lead to an out-of-memory condition. The other, a null pointer dereference (CWE-476), can cause a segmentation fault. Both issues can result in the `readelf` utility becoming unresponsive or crashing, leading to a denial of service. Severity: 5.5 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE Details

Severity
MEDIUM
CWE: CWE-400
Attack Vector: local
Impact: Denial of Service