CVE-2026-19582 - Vulnerability Details

Red Hat Product Security has come to the conclusion that this CVE is false due to upstream security policy.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Gnu	Binutils
Redhat	Enterprise Linux Hardened Images Migration Toolkit For Containers Openshift Container Platform

No data.

References

No reference.

History

Sat, 05 Sep 2026 22:30:00 +0000

Type	Values Removed	Values Added
Title	Binutils: stack buffer overflow in gnu binutils in rsrc_print_name from an untrusted pe file
Metrics	cvssV3_1 `{'score': 7.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'}` ssvc `{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Fri, 04 Sep 2026 09:30:00 +0000

Type	Values Removed	Values Added
Title		Binutils: stack buffer overflow in gnu binutils in rsrc_print_name from an untrusted pe file
Metrics		cvssV3_1 `{'score': 7.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'}` ssvc `{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Fri, 04 Sep 2026 04:30:00 +0000

Type	Values Removed	Values Added
Title	Binutils: stack buffer overflow in gnu binutils in rsrc_print_name from an untrusted pe file
Weaknesses	CWE-787
References	https://access.redhat.com/security/cve/CVE-2026-19582 https://bugzilla.redhat.com/show_bug.cgi?id=2513754
Metrics	cvssV3_1 `{'score': 7.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'}` ssvc `{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Fri, 04 Sep 2026 03:30:00 +0000

Type	Values Removed	Values Added
Description	In binutils 2.46.1 and prior versions, a victim who opens a crafted PE file using binutils could execute arbitrary code unknowningly via a stack buffer overflow out of bounds write.	Red Hat Product Security has come to the conclusion that this CVE is false due to upstream security policy.
CPEs	cpe:/a:redhat:hummingbird:1 cpe:/a:redhat:openshift:4 cpe:/a:redhat:rhmt:1 cpe:/o:redhat:enterprise_linux:10 cpe:/o:redhat:enterprise_linux:6 cpe:/o:redhat:enterprise_linux:7 cpe:/o:redhat:enterprise_linux:8 cpe:/o:redhat:enterprise_linux:9
Vendors & Products	Redhat hummingbird Redhat openshift Redhat rhmt
Metrics	cvssV3_1 `{'score': 0, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N'}`	cvssV3_1 `{'score': 7.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'}`

Wed, 26 Aug 2026 15:30:00 +0000

Type	Values Removed	Values Added
Metrics	ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`	ssvc `{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Wed, 26 Aug 2026 12:30:00 +0000

Type	Values Removed	Values Added
Metrics		cvssV3_1 `{'score': 0, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N'}`

Tue, 25 Aug 2026 23:30:00 +0000

Type	Values Removed	Values Added
Metrics	cvssV3_1 `{'score': 7.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'}`

Fri, 21 Aug 2026 21:45:00 +0000

Type	Values Removed	Values Added
First Time appeared		Gnu Gnu binutils Redhat hardened Images Redhat migration Toolkit For Containers Redhat openshift Container Platform
Vendors & Products		Gnu Gnu binutils Redhat hardened Images Redhat migration Toolkit For Containers Redhat openshift Container Platform

Thu, 20 Aug 2026 23:30:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Thu, 20 Aug 2026 05:15:00 +0000

Type	Values Removed	Values Added
Description		In binutils 2.46.1 and prior versions, a victim who opens a crafted PE file using binutils could execute arbitrary code unknowningly via a stack buffer overflow out of bounds write.
Title		Binutils: stack buffer overflow in gnu binutils in rsrc_print_name from an untrusted pe file
First Time appeared		Redhat Redhat enterprise Linux Redhat hummingbird Redhat openshift Redhat rhmt
Weaknesses		CWE-787
CPEs		cpe:/a:redhat:hummingbird:1 cpe:/a:redhat:openshift:4 cpe:/a:redhat:rhmt:1 cpe:/o:redhat:enterprise_linux:10 cpe:/o:redhat:enterprise_linux:6 cpe:/o:redhat:enterprise_linux:7 cpe:/o:redhat:enterprise_linux:8 cpe:/o:redhat:enterprise_linux:9
Vendors & Products		Redhat Redhat enterprise Linux Redhat hummingbird Redhat openshift Redhat rhmt
References		https://access.redhat.com/security/cve/CVE-2026-19582 https://bugzilla.redhat.com/show_bug.cgi?id=2513754
Metrics		cvssV3_1 `{'score': 7.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'}`