cve-2026-4647

CVE-2026-4647 is a vulnerability in GNU Binutils affecting the BFD library when parsing specially crafted XCOFF object files. The flaw leads to an out-of-bounds read, which can cause denial of service and limited memory disclosure. While not enabling code execution, the issue has drawn attention beyond the Unix toolchain community, including from Microsoft, which frames it as a denial-of-service condition that could allow an attacker to repeatedly render the impacted component unavailable. Discussions on WindowsForum cover the technical details, affected versions, and mitigation strategies for this Binutils vulnerability.