CVE-2026-15003: Binutils: gnu binutils: heap-buffer-overflow in linker leads to information disclosure and denial of service

Overview

Severity
Medium (CVSS 5.6)
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:H/E:U
Exploit Status
Not Exploited
Patch Tuesday
2026-Aug
Released
2026-08-07
EPSS Score
0.11% (percentile: 1.3%)

Affected Products (2)

Open Source Software

  • azl3 gdb 13.2-10 on Azure Linux 3.0
  • azl3 binutils 2.41-13 on Azure Linux 3.0

Revision History

  • 2026-08-07: Information published.