CVE detail
CVE-2026-6845
A flaw was found in binutils, specifically within the `readelf` utility. This vulnerability allows a local attacker to cause a Denial of Service (DoS) by tricking a user into processing a specially crafted Executable and Linkable Format (ELF) file. The exploitation of this flaw can lead to the system becoming unresponsive due to excessive resource consumption or a program crash.
Buzz score
Why this CVE is surfacing
This all-time snapshot uses the same composite formula as Trending across a 30-year evidence window, rather than a current rolling window.
Buzz score components · mention 17.9 · diversity 15.0 · KEV 0.0 · OTX 0.0 · PoC 0.0
Why it matters now
Mention timeline
- Total mentions
- 0
- within the 30d window
- Peak daily
- 0
- highest bucket
Evidence
Source links by recency
5 source links · newest first
Information published.
vendormsrc.microsoft.comMay 3, 2026, 8:01 AM- https://bugzilla.redhat.com/show_bug.cgi?id=2460012bugzilla.redhat.com
No excerpt available.
Exploitbugzilla.redhat.comApr 22, 2026, 9:16 AM - https://access.redhat.com/security/cve/CVE-2026-6845access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comApr 22, 2026, 9:16 AM - https://access.redhat.com/errata/RHSA-2026:39022access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comApr 22, 2026, 9:16 AM - https://access.redhat.com/errata/RHSA-2026:34924access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comApr 22, 2026, 9:16 AM
Exploit code
Public exploit repository references
Public PoC repositories are third-party, potentially unsafe artifacts. Treat their code as untrusted and use it only on authorized systems in an isolated, least-privilege environment. cvebuzz does not execute the code or verify that an exploit works.
0 repository references · best confidence N/A · max 0 stars
Related records
Similar CVEs
6 related CVEs with shared weakness or product evidence
- CVE-2026-5745CVSS 5.5 · Medium
A flaw was found in libarchive. A NULL pointer dereference vulnerability exists in the ACL parsing logic, specifically within the archive_acl_from_text_nl() function. When process…
- CVE-2026-6846CVSS 7.8 · High
A flaw was found in binutils. A heap-buffer-overflow vulnerability exists when processing a specially crafted XCOFF (Extended Common Object File Format) object file during linking…
- CVE-2026-6844CVSS 5.5 · Medium
A flaw was found in the `readelf` utility of the binutils package. A local attacker could exploit two Denial of Service (DoS) vulnerabilities by providing a specially crafted Exec…
- CVE-2022-4285CVSS 5.5 · Medium
An illegal memory access flaw was found in the binutils package. Parsing an ELF file containing corrupt symbol version information may result in a denial of service. This issue is…
- CVE-2020-25639CVSS 4.4 · Medium
A NULL pointer dereference flaw was found in the Linux kernel's GPU Nouveau driver functionality in versions prior to 5.12-rc1 in the way the user calls ioctl DRM_IOCTL_NOUVEAU_CH…
- CVE-2020-35507CVSS 5.5 · Medium
There's a flaw in bfd_pef_parse_function_stubs of bfd/pef.c in binutils in versions prior to 2.34 which could allow an attacker who is able to submit a crafted file to be processe…