{"grype_matches":[{"artifact":{"id":"56144b5ac3e92bcb","cpes":["cpe:2.3:a:binutils:binutils:2.45.1-r1:*:*:*:*:*:*:*","cpe:2.3:a:gnu:binutils:2.45.1-r1:*:*:*:*:*:*:*"],"name":"binutils","purl":"pkg:apk/alpine/binutils@2.45.1-r1?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"2.45.1-r1","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later AND BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/addr2line"},{"path":"/usr/bin/ar"},{"path":"/usr/bin/as"},{"path":"/usr/bin/c++filt"},{"path":"/usr/bin/dwp"},{"path":"/usr/bin/elfedit"},{"path":"/usr/bin/gprof"},{"path":"/usr/bin/ld"},{"path":"/usr/bin/ld.bfd"},{"path":"/usr/bin/nm"},{"path":"/usr/bin/objcopy"},{"path":"/usr/bin/objdump"},{"path":"/usr/bin/ranlib"},{"path":"/usr/bin/readelf"},{"path":"/usr/bin/size"},{"path":"/usr/bin/strings"},{"path":"/usr/bin/strip"},{"path":"/usr/lib"},{"path":"/usr/lib/libbfd-2.45.1.so"},{"path":"/usr/lib/libctf-nobfd.so.0"},{"path":"/usr/lib/libctf-nobfd.so.0.0.0"},{"path":"/usr/lib/libctf.so.0"},{"path":"/usr/lib/libctf.so.0.0.0"},{"path":"/usr/lib/libopcodes-2.45.1.so"},{"path":"/usr/lib/libsframe.so.2"},{"path":"/usr/lib/libsframe.so.2.0.0"},{"path":"/usr/lib/bfd-plugins"},{"path":"/usr/lib/bfd-plugins/libdep.so"},{"path":"/usr/x86_64-alpine-linux-musl"},{"path":"/usr/x86_64-alpine-linux-musl/bin"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ar"},{"path":"/usr/x86_64-alpine-linux-musl/bin/as"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ld"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ld.bfd"},{"path":"/usr/x86_64-alpine-linux-musl/bin/nm"},{"path":"/usr/x86_64-alpine-linux-musl/bin/objcopy"},{"path":"/usr/x86_64-alpine-linux-musl/bin/objdump"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ranlib"},{"path":"/usr/x86_64-alpine-linux-musl/bin/readelf"},{"path":"/usr/x86_64-alpine-linux-musl/bin/strip"},{"path":"/usr/x86_64-alpine-linux-musl/lib"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xa"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xa"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/stamp"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:6e55090f9f3d41847bdfd6f69c7e7131e1de42c2746a9e88b1938eb12adb638f","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"binutils"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:gnu:binutils:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2025-69650","versionConstraint":"<= 2.46 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:gnu:binutils:2.45.1:*:*:*:*:*:*:*"],"package":{"name":"binutils","version":"2.45.1-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2025-69650","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-69650","cwe":"CWE-415","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2025-69650","cwe":"CWE-415","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-69650","date":"2026-10-30","epss":0.00533,"percentile":0.45029}],"risk":0.39974999999999994,"urls":["https://sourceware.org/bugzilla/show_bug.cgi?id=33698","https://sourceware.org/bugzilla/show_bug.cgi?id=33700","https://sourceware.org/git/?p=binutils-gdb.git;a=commitdiff;h=81e90cf63a10ad11772c2437c8f2a88f1a00c739","https://sourceware.org/git/?p=binutils-gdb.git;a=commitdiff;h=ea4bc025abdba85a90e26e13f551c16a44bfa92","https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=ea4bc025abdba85a90e26e13f551c16a44bfa921"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-69650","description":"GNU Binutils thru 2.46 readelf contains a double free vulnerability when processing a crafted ELF binary with malformed relocation data. During GOT relocation handling, dump_relocations may return early without initializing the all_relocations array. As a result, process_got_section_contents() may pass an uninitialized r_symbol pointer to free(), leading to a double free and terminating the program with SIGABRT. No evidence of exploitable memory corruption or code execution was observed; the impact is limited to denial of service. NOTE: this is disputed by third parties because the observed behavior occurred only in pre-release code and did not affect any tagged version."},"relatedVulnerabilities":[]},{"artifact":{"id":"90939566e683abd3","cpes":["cpe:2.3:a:wget:wget:1.25.0-r3:*:*:*:*:*:*:*","cpe:2.3:a:gnu:wget:1.25.0-r3:*:*:*:*:*:*:*"],"name":"wget","purl":"pkg:apk/alpine/wget@1.25.0-r3?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"1.25.0-r3","language":"","licenses":["GPL-3.0-or-later","OpenSSL-Exception","WITH"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/wgetrc"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/wget"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:6e55090f9f3d41847bdfd6f69c7e7131e1de42c2746a9e88b1938eb12adb638f","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"wget"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:gnu:wget:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-58469","versionConstraint":"<= 1.25.0 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:gnu:wget:1.25.0:*:*:*:*:*:*:*"],"package":{"name":"wget","version":"1.25.0-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-58469","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-58469","cwe":"CWE-125","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-58469","date":"2026-10-30","epss":0.00493,"percentile":0.4235}],"risk":0.38454000000000005,"urls":["https://gitlab.com/gnuwget/wget/-/commit/37a40fcb450153f69537c7cbc2a7a4fb0b6f7826","https://www.vulncheck.com/advisories/gnu-wget-heap-buffer-underread-via-metalink-url-parsing"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-58469","description":"GNU Wget through 1.25.0, fixed in commit 37a40fc, contains a heap buffer underread vulnerability in the clean_metalink_string() function within src/metalink.c that allows a malicious server to trigger memory corruption by serving a Metalink document containing a whitespace-only URL. Attackers can cause the function to decrement a pointer past the start of the buffer when processing an all-whitespace Metalink URL, potentially leading to abnormal program behavior."},"relatedVulnerabilities":[]},{"artifact":{"id":"90939566e683abd3","cpes":["cpe:2.3:a:wget:wget:1.25.0-r3:*:*:*:*:*:*:*","cpe:2.3:a:gnu:wget:1.25.0-r3:*:*:*:*:*:*:*"],"name":"wget","purl":"pkg:apk/alpine/wget@1.25.0-r3?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"1.25.0-r3","language":"","licenses":["GPL-3.0-or-later","OpenSSL-Exception","WITH"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/wgetrc"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/wget"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:6e55090f9f3d41847bdfd6f69c7e7131e1de42c2746a9e88b1938eb12adb638f","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"wget"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:gnu:wget:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-58471","versionConstraint":"<= 1.25.0 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:gnu:wget:1.25.0:*:*:*:*:*:*:*"],"package":{"name":"wget","version":"1.25.0-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-58471","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H","metrics":{"baseScore":7.1,"impactScore":4.3,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:H","metrics":{"baseScore":5.9,"impactScore":4.3,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-58471","cwe":"CWE-122","type":"Primary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-58471","date":"2026-10-30","epss":0.0039,"percentile":0.33074}],"risk":0.26975,"urls":["https://gitlab.com/gnuwget/wget/-/commit/c2640fe5171c59f87c58dc9fcb195b2d18b010ee","https://www.vulncheck.com/advisories/gnu-wget-heap-buffer-overflow-via-convert-fname-in-url-c"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-58471","description":"GNU Wget through 1.25.0, fixed in commit c2640fe, contains a heap buffer overflow vulnerability in the convert_fname() function within src/url.c that allows remote attackers to trigger memory corruption through a server-supplied filename requiring character set conversion. When the output buffer is too small during iconv E2BIG reallocation, the reallocation logic miscalculates the remaining space, leading to a heap buffer overflow that can be exploited via a maliciously crafted server response."},"relatedVulnerabilities":[]},{"artifact":{"id":"90939566e683abd3","cpes":["cpe:2.3:a:wget:wget:1.25.0-r3:*:*:*:*:*:*:*","cpe:2.3:a:gnu:wget:1.25.0-r3:*:*:*:*:*:*:*"],"name":"wget","purl":"pkg:apk/alpine/wget@1.25.0-r3?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"1.25.0-r3","language":"","licenses":["GPL-3.0-or-later","OpenSSL-Exception","WITH"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/wgetrc"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/wget"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:6e55090f9f3d41847bdfd6f69c7e7131e1de42c2746a9e88b1938eb12adb638f","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"wget"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:gnu:wget:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-58472","versionConstraint":"<= 1.25.0 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:gnu:wget:1.25.0:*:*:*:*:*:*:*"],"package":{"name":"wget","version":"1.25.0-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-58472","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H","metrics":{"baseScore":7.1,"impactScore":4.3,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:H","metrics":{"baseScore":5.9,"impactScore":4.3,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-58472","cwe":"CWE-190","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-58472","date":"2026-10-30","epss":0.0039,"percentile":0.33074}],"risk":0.26975,"urls":["https://gitlab.com/gnuwget/wget/-/commit/dd692d9cea5335b181d877ae917fe6e75587a812","https://www.vulncheck.com/advisories/gnu-wget-heap-buffer-overflow-via-html-attribute-encoding"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-58472","description":"GNU Wget through 1.25.0, fixed in commit dd692d9, contains a heap buffer overflow vulnerability in the html_quote_string() function in src/convert.c that allows a remote attacker to trigger memory corruption by supplying a crafted HTML attribute with a large number of characters requiring entity encoding. A server-supplied HTML attribute causes a signed integer counter to overflow during output size accumulation, resulting in an undersized heap allocation and subsequent heap buffer overflow during the copy phase."},"relatedVulnerabilities":[]},{"artifact":{"id":"6921667c3af65467","cpes":["cpe:2.3:a:coreutils:coreutils:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:gnu:coreutils:9.11-r0:*:*:*:*:*:*:*"],"name":"coreutils","purl":"pkg:apk/alpine/coreutils@9.11-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"9.11-r0","language":"","licenses":["GPL-3.0-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/bin"},{"path":"/bin/base64"},{"path":"/bin/cat"},{"path":"/bin/chgrp"},{"path":"/bin/chmod"},{"path":"/bin/chown"},{"path":"/bin/coreutils"},{"path":"/bin/cp"},{"path":"/bin/date"},{"path":"/bin/dd"},{"path":"/bin/df"},{"path":"/bin/echo"},{"path":"/bin/false"},{"path":"/bin/link"},{"path":"/bin/ln"},{"path":"/bin/ls"},{"path":"/bin/mkdir"},{"path":"/bin/mknod"},{"path":"/bin/mktemp"},{"path":"/bin/mv"},{"path":"/bin/nice"},{"path":"/bin/printenv"},{"path":"/bin/pwd"},{"path":"/bin/rm"},{"path":"/bin/rmdir"},{"path":"/bin/sleep"},{"path":"/bin/stat"},{"path":"/bin/stty"},{"path":"/bin/sync"},{"path":"/bin/touch"},{"path":"/bin/true"},{"path":"/bin/uname"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/["},{"path":"/usr/bin/b2sum"},{"path":"/usr/bin/base32"},{"path":"/usr/bin/basename"},{"path":"/usr/bin/basenc"},{"path":"/usr/bin/cksum"},{"path":"/usr/bin/comm"},{"path":"/usr/bin/csplit"},{"path":"/usr/bin/cut"},{"path":"/usr/bin/dir"},{"path":"/usr/bin/dircolors"},{"path":"/usr/bin/dirname"},{"path":"/usr/bin/du"},{"path":"/usr/bin/expand"},{"path":"/usr/bin/expr"},{"path":"/usr/bin/factor"},{"path":"/usr/bin/fold"},{"path":"/usr/bin/head"},{"path":"/usr/bin/hostid"},{"path":"/usr/bin/id"},{"path":"/usr/bin/install"},{"path":"/usr/bin/join"},{"path":"/usr/bin/logname"},{"path":"/usr/bin/md5sum"},{"path":"/usr/bin/mkfifo"},{"path":"/usr/bin/nl"},{"path":"/usr/bin/nohup"},{"path":"/usr/bin/nproc"},{"path":"/usr/bin/numfmt"},{"path":"/usr/bin/od"},{"path":"/usr/bin/paste"},{"path":"/usr/bin/pathchk"},{"path":"/usr/bin/pinky"},{"path":"/usr/bin/pr"},{"path":"/usr/bin/printf"},{"path":"/usr/bin/ptx"},{"path":"/usr/bin/readlink"},{"path":"/usr/bin/realpath"},{"path":"/usr/bin/seq"},{"path":"/usr/bin/sha1sum"},{"path":"/usr/bin/sha224sum"},{"path":"/usr/bin/sha256sum"},{"path":"/usr/bin/sha384sum"},{"path":"/usr/bin/shred"},{"path":"/usr/bin/shuf"},{"path":"/usr/bin/sort"},{"path":"/usr/bin/split"},{"path":"/usr/bin/stdbuf"},{"path":"/usr/bin/sum"},{"path":"/usr/bin/tac"},{"path":"/usr/bin/tail"},{"path":"/usr/bin/tee"},{"path":"/usr/bin/test"},{"path":"/usr/bin/timeout"},{"path":"/usr/bin/tr"},{"path":"/usr/bin/truncate"},{"path":"/usr/bin/tsort"},{"path":"/usr/bin/tty"},{"path":"/usr/bin/unexpand"},{"path":"/usr/bin/uniq"},{"path":"/usr/bin/unlink"},{"path":"/usr/bin/users"},{"path":"/usr/bin/vdir"},{"path":"/usr/bin/wc"},{"path":"/usr/bin/who"},{"path":"/usr/bin/whoami"},{"path":"/usr/bin/yes"},{"path":"/usr/libexec"},{"path":"/usr/libexec/coreutils"},{"path":"/usr/libexec/coreutils/libstdbuf.so"},{"path":"/usr/sbin"},{"path":"/usr/sbin/chroot"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:6e55090f9f3d41847bdfd6f69c7e7131e1de42c2746a9e88b1938eb12adb638f","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"coreutils"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:gnu:coreutils:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2016-2781","versionConstraint":"none (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:gnu:coreutils:9.11:*:*:*:*:*:*:*"],"package":{"name":"coreutils","version":"9.11-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2016-2781","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N","metrics":{"baseScore":6.5,"impactScore":4,"exploitabilityScore":2.1},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:L/AC:L/Au:N/C:N/I:P/A:N","metrics":{"baseScore":2.1,"impactScore":2.9,"exploitabilityScore":4},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","metrics":{"baseScore":4.6,"impactScore":2.8,"exploitabilityScore":1.5},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2016-2781","cwe":"CWE-20","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2016-2781","cwe":"CWE-20","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2016-2781","date":"2026-10-30","epss":0.00428,"percentile":0.37084}],"risk":0.20115999999999998,"urls":["http://www.openwall.com/lists/oss-security/2016/02/28/2","http://www.openwall.com/lists/oss-security/2016/02/28/3","https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2016-2781","description":"chroot in GNU coreutils, when used with --userspec, allows local users to escape to the parent session via a crafted TIOCSTI ioctl call, which pushes characters to the terminal's input buffer."},"relatedVulnerabilities":[]},{"artifact":{"id":"16361c4de507bb4c","cpes":["cpe:2.3:a:coreutils-env:coreutils-env:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils-env:coreutils_env:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils_env:coreutils-env:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils_env:coreutils_env:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils:coreutils-env:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils:coreutils_env:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:gnu:coreutils-env:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:gnu:coreutils_env:9.11-r0:*:*:*:*:*:*:*"],"name":"coreutils-env","purl":"pkg:apk/alpine/coreutils-env@9.11-r0?arch=x86_64&distro=alpine-3.24.3&upstream=coreutils","type":"apk","version":"9.11-r0","language":"","licenses":["GPL-3.0-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/env"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:6e55090f9f3d41847bdfd6f69c7e7131e1de42c2746a9e88b1938eb12adb638f","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"coreutils"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:gnu:coreutils:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2016-2781","versionConstraint":"none (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:gnu:coreutils:9.11:*:*:*:*:*:*:*"],"package":{"name":"coreutils","version":"9.11-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2016-2781","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N","metrics":{"baseScore":6.5,"impactScore":4,"exploitabilityScore":2.1},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:L/AC:L/Au:N/C:N/I:P/A:N","metrics":{"baseScore":2.1,"impactScore":2.9,"exploitabilityScore":4},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","metrics":{"baseScore":4.6,"impactScore":2.8,"exploitabilityScore":1.5},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2016-2781","cwe":"CWE-20","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2016-2781","cwe":"CWE-20","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2016-2781","date":"2026-10-30","epss":0.00428,"percentile":0.37084}],"risk":0.20115999999999998,"urls":["http://www.openwall.com/lists/oss-security/2016/02/28/2","http://www.openwall.com/lists/oss-security/2016/02/28/3","https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2016-2781","description":"chroot in GNU coreutils, when used with --userspec, allows local users to escape to the parent session via a crafted TIOCSTI ioctl call, which pushes characters to the terminal's input buffer."},"relatedVulnerabilities":[]},{"artifact":{"id":"0c43a637992609b6","cpes":["cpe:2.3:a:coreutils-fmt:coreutils-fmt:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils-fmt:coreutils_fmt:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils_fmt:coreutils-fmt:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils_fmt:coreutils_fmt:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils:coreutils-fmt:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils:coreutils_fmt:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:gnu:coreutils-fmt:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:gnu:coreutils_fmt:9.11-r0:*:*:*:*:*:*:*"],"name":"coreutils-fmt","purl":"pkg:apk/alpine/coreutils-fmt@9.11-r0?arch=x86_64&distro=alpine-3.24.3&upstream=coreutils","type":"apk","version":"9.11-r0","language":"","licenses":["GPL-3.0-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/fmt"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:6e55090f9f3d41847bdfd6f69c7e7131e1de42c2746a9e88b1938eb12adb638f","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"coreutils"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:gnu:coreutils:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2016-2781","versionConstraint":"none (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:gnu:coreutils:9.11:*:*:*:*:*:*:*"],"package":{"name":"coreutils","version":"9.11-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2016-2781","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N","metrics":{"baseScore":6.5,"impactScore":4,"exploitabilityScore":2.1},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:L/AC:L/Au:N/C:N/I:P/A:N","metrics":{"baseScore":2.1,"impactScore":2.9,"exploitabilityScore":4},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","metrics":{"baseScore":4.6,"impactScore":2.8,"exploitabilityScore":1.5},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2016-2781","cwe":"CWE-20","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2016-2781","cwe":"CWE-20","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2016-2781","date":"2026-10-30","epss":0.00428,"percentile":0.37084}],"risk":0.20115999999999998,"urls":["http://www.openwall.com/lists/oss-security/2016/02/28/2","http://www.openwall.com/lists/oss-security/2016/02/28/3","https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2016-2781","description":"chroot in GNU coreutils, when used with --userspec, allows local users to escape to the parent session via a crafted TIOCSTI ioctl call, which pushes characters to the terminal's input buffer."},"relatedVulnerabilities":[]},{"artifact":{"id":"157238390cea3b89","cpes":["cpe:2.3:a:coreutils-sha512sum:coreutils-sha512sum:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils-sha512sum:coreutils_sha512sum:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils_sha512sum:coreutils-sha512sum:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils_sha512sum:coreutils_sha512sum:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils:coreutils-sha512sum:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils:coreutils_sha512sum:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:gnu:coreutils-sha512sum:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:gnu:coreutils_sha512sum:9.11-r0:*:*:*:*:*:*:*"],"name":"coreutils-sha512sum","purl":"pkg:apk/alpine/coreutils-sha512sum@9.11-r0?arch=x86_64&distro=alpine-3.24.3&upstream=coreutils","type":"apk","version":"9.11-r0","language":"","licenses":["GPL-3.0-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/sha512sum"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:6e55090f9f3d41847bdfd6f69c7e7131e1de42c2746a9e88b1938eb12adb638f","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"coreutils"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:gnu:coreutils:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2016-2781","versionConstraint":"none (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:gnu:coreutils:9.11:*:*:*:*:*:*:*"],"package":{"name":"coreutils","version":"9.11-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2016-2781","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N","metrics":{"baseScore":6.5,"impactScore":4,"exploitabilityScore":2.1},"version":"3.0","vendorMetadata":{}},{"type":"Primary","source":"nvd@nist.gov","vector":"AV:L/AC:L/Au:N/C:N/I:P/A:N","metrics":{"baseScore":2.1,"impactScore":2.9,"exploitabilityScore":4},"version":"2.0","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","metrics":{"baseScore":4.6,"impactScore":2.8,"exploitabilityScore":1.5},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2016-2781","cwe":"CWE-20","type":"Primary","source":"nvd@nist.gov"},{"cve":"CVE-2016-2781","cwe":"CWE-20","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2016-2781","date":"2026-10-30","epss":0.00428,"percentile":0.37084}],"risk":0.20115999999999998,"urls":["http://www.openwall.com/lists/oss-security/2016/02/28/2","http://www.openwall.com/lists/oss-security/2016/02/28/3","https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2016-2781","description":"chroot in GNU coreutils, when used with --userspec, allows local users to escape to the parent session via a crafted TIOCSTI ioctl call, which pushes characters to the terminal's input buffer."},"relatedVulnerabilities":[]},{"artifact":{"id":"56144b5ac3e92bcb","cpes":["cpe:2.3:a:binutils:binutils:2.45.1-r1:*:*:*:*:*:*:*","cpe:2.3:a:gnu:binutils:2.45.1-r1:*:*:*:*:*:*:*"],"name":"binutils","purl":"pkg:apk/alpine/binutils@2.45.1-r1?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"2.45.1-r1","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later AND BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/addr2line"},{"path":"/usr/bin/ar"},{"path":"/usr/bin/as"},{"path":"/usr/bin/c++filt"},{"path":"/usr/bin/dwp"},{"path":"/usr/bin/elfedit"},{"path":"/usr/bin/gprof"},{"path":"/usr/bin/ld"},{"path":"/usr/bin/ld.bfd"},{"path":"/usr/bin/nm"},{"path":"/usr/bin/objcopy"},{"path":"/usr/bin/objdump"},{"path":"/usr/bin/ranlib"},{"path":"/usr/bin/readelf"},{"path":"/usr/bin/size"},{"path":"/usr/bin/strings"},{"path":"/usr/bin/strip"},{"path":"/usr/lib"},{"path":"/usr/lib/libbfd-2.45.1.so"},{"path":"/usr/lib/libctf-nobfd.so.0"},{"path":"/usr/lib/libctf-nobfd.so.0.0.0"},{"path":"/usr/lib/libctf.so.0"},{"path":"/usr/lib/libctf.so.0.0.0"},{"path":"/usr/lib/libopcodes-2.45.1.so"},{"path":"/usr/lib/libsframe.so.2"},{"path":"/usr/lib/libsframe.so.2.0.0"},{"path":"/usr/lib/bfd-plugins"},{"path":"/usr/lib/bfd-plugins/libdep.so"},{"path":"/usr/x86_64-alpine-linux-musl"},{"path":"/usr/x86_64-alpine-linux-musl/bin"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ar"},{"path":"/usr/x86_64-alpine-linux-musl/bin/as"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ld"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ld.bfd"},{"path":"/usr/x86_64-alpine-linux-musl/bin/nm"},{"path":"/usr/x86_64-alpine-linux-musl/bin/objcopy"},{"path":"/usr/x86_64-alpine-linux-musl/bin/objdump"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ranlib"},{"path":"/usr/x86_64-alpine-linux-musl/bin/readelf"},{"path":"/usr/x86_64-alpine-linux-musl/bin/strip"},{"path":"/usr/x86_64-alpine-linux-musl/lib"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xa"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xa"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/stamp"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:6e55090f9f3d41847bdfd6f69c7e7131e1de42c2746a9e88b1938eb12adb638f","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"binutils"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:gnu:binutils:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2025-69649","versionConstraint":"<= 2.46 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:gnu:binutils:2.45.1:*:*:*:*:*:*:*"],"package":{"name":"binutils","version":"2.45.1-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2025-69649","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-69649","cwe":"CWE-476","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-69649","date":"2026-10-30","epss":0.00272,"percentile":0.19641}],"risk":0.1904,"urls":["https://sourceware.org/bugzilla/show_bug.cgi?id=33697","https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=66a3492ce68e1ae45b2489bd9a815c39ea5d7f66"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-69649","description":"GNU Binutils thru 2.46 readelf contains a null pointer dereference vulnerability when processing a crafted ELF binary with malformed header fields. During relocation processing, an invalid or null section pointer may be passed into display_relocations(), resulting in a segmentation fault (SIGSEGV) and abrupt termination. No evidence of memory corruption beyond the null pointer dereference, nor any possibility of code execution, was observed."},"relatedVulnerabilities":[]},{"artifact":{"id":"56144b5ac3e92bcb","cpes":["cpe:2.3:a:binutils:binutils:2.45.1-r1:*:*:*:*:*:*:*","cpe:2.3:a:gnu:binutils:2.45.1-r1:*:*:*:*:*:*:*"],"name":"binutils","purl":"pkg:apk/alpine/binutils@2.45.1-r1?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"2.45.1-r1","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later AND BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/addr2line"},{"path":"/usr/bin/ar"},{"path":"/usr/bin/as"},{"path":"/usr/bin/c++filt"},{"path":"/usr/bin/dwp"},{"path":"/usr/bin/elfedit"},{"path":"/usr/bin/gprof"},{"path":"/usr/bin/ld"},{"path":"/usr/bin/ld.bfd"},{"path":"/usr/bin/nm"},{"path":"/usr/bin/objcopy"},{"path":"/usr/bin/objdump"},{"path":"/usr/bin/ranlib"},{"path":"/usr/bin/readelf"},{"path":"/usr/bin/size"},{"path":"/usr/bin/strings"},{"path":"/usr/bin/strip"},{"path":"/usr/lib"},{"path":"/usr/lib/libbfd-2.45.1.so"},{"path":"/usr/lib/libctf-nobfd.so.0"},{"path":"/usr/lib/libctf-nobfd.so.0.0.0"},{"path":"/usr/lib/libctf.so.0"},{"path":"/usr/lib/libctf.so.0.0.0"},{"path":"/usr/lib/libopcodes-2.45.1.so"},{"path":"/usr/lib/libsframe.so.2"},{"path":"/usr/lib/libsframe.so.2.0.0"},{"path":"/usr/lib/bfd-plugins"},{"path":"/usr/lib/bfd-plugins/libdep.so"},{"path":"/usr/x86_64-alpine-linux-musl"},{"path":"/usr/x86_64-alpine-linux-musl/bin"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ar"},{"path":"/usr/x86_64-alpine-linux-musl/bin/as"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ld"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ld.bfd"},{"path":"/usr/x86_64-alpine-linux-musl/bin/nm"},{"path":"/usr/x86_64-alpine-linux-musl/bin/objcopy"},{"path":"/usr/x86_64-alpine-linux-musl/bin/objdump"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ranlib"},{"path":"/usr/x86_64-alpine-linux-musl/bin/readelf"},{"path":"/usr/x86_64-alpine-linux-musl/bin/strip"},{"path":"/usr/x86_64-alpine-linux-musl/lib"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xa"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xa"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/stamp"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:6e55090f9f3d41847bdfd6f69c7e7131e1de42c2746a9e88b1938eb12adb638f","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"binutils"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:gnu:binutils:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-3442","versionConstraint":"none (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:gnu:binutils:2.45.1:*:*:*:*:*:*:*"],"package":{"name":"binutils","version":"2.45.1-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-3442","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H","metrics":{"baseScore":7.1,"impactScore":5.2,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:L","metrics":{"baseScore":6.1,"impactScore":4.3,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-3442","cwe":"CWE-125","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-3442","date":"2026-10-30","epss":0.00259,"percentile":0.17664}],"risk":0.18259499999999998,"urls":["https://access.redhat.com/errata/RHSA-2026:33527","https://access.redhat.com/errata/RHSA-2026:39022","https://access.redhat.com/security/cve/CVE-2026-3442","https://bugzilla.redhat.com/show_bug.cgi?id=2443828"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-3442","description":"A flaw was found in GNU Binutils. This vulnerability, a heap-based buffer overflow, specifically an out-of-bounds read, exists in the bfd linker component. An attacker could exploit this by convincing a user to process a specially crafted malicious XCOFF object file. Successful exploitation may lead to the disclosure of sensitive information or cause the application to crash, resulting in an application level denial of service."},"relatedVulnerabilities":[]},{"artifact":{"id":"fef07e9c95ea2bda","cpes":["cpe:2.3:a:busybox:busybox:1.37.0-r31:*:*:*:*:*:*:*"],"name":"busybox","purl":"pkg:apk/alpine/busybox@1.37.0-r31?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"1.37.0-r31","language":"","licenses":["GPL-2.0-only"],"metadata":{"Arch":"x86_64","files":[{"path":"/bin"},{"path":"/bin/busybox"},{"path":"/etc"},{"path":"/etc/securetty"},{"path":"/etc/busybox-paths.d"},{"path":"/etc/busybox-paths.d/busybox"},{"path":"/etc/logrotate.d"},{"path":"/etc/logrotate.d/acpid"},{"path":"/etc/network"},{"path":"/etc/network/if-down.d"},{"path":"/etc/network/if-post-down.d"},{"path":"/etc/network/if-post-up.d"},{"path":"/etc/network/if-pre-down.d"},{"path":"/etc/network/if-pre-up.d"},{"path":"/etc/network/if-up.d"},{"path":"/etc/network/if-up.d/dad"},{"path":"/etc/udhcpc"},{"path":"/etc/udhcpc/udhcpc.conf"},{"path":"/sbin"},{"path":"/usr"},{"path":"/usr/sbin"},{"path":"/usr/share"},{"path":"/usr/share/udhcpc"},{"path":"/usr/share/udhcpc/default.script"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:6e55090f9f3d41847bdfd6f69c7e7131e1de42c2746a9e88b1938eb12adb638f","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"busybox"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:busybox:busybox:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2025-60876","versionConstraint":"<= 1.37.0 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:busybox:busybox:1.37.0:*:*:*:*:*:*:*"],"package":{"name":"busybox","version":"1.37.0-r31"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2025-60876","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-60876","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-60876","date":"2026-10-30","epss":0.00312,"percentile":0.24125}],"risk":0.17939999999999998,"urls":["https://gist.github.com/subyumatest/41554af6a72aedaacaec026adc311092","https://lists.busybox.net/pipermail/busybox/attachments/20250823/ccdc96ef/attachment-0001.htm","https://lists.busybox.net/pipermail/busybox/attachments/20250828/e7f90492/attachment.htm","https://cert-portal.siemens.com/productcert/html/ssa-253495.html"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-60876","description":"BusyBox wget thru 1.3.7 accepted raw CR (0x0D)/LF (0x0A) and other C0 control bytes in the HTTP request-target (path/query), allowing the request line to be split and attacker-controlled headers to be injected. To preserve the HTTP/1.1 request-line shape METHOD SP request-target SP HTTP/1.1, a raw space (0x20) in the request-target must also be rejected (clients should use %20)."},"relatedVulnerabilities":[]},{"artifact":{"id":"915155597fcdee9a","cpes":["cpe:2.3:a:busybox-binsh:busybox-binsh:1.37.0-r31:*:*:*:*:*:*:*","cpe:2.3:a:busybox-binsh:busybox_binsh:1.37.0-r31:*:*:*:*:*:*:*","cpe:2.3:a:busybox_binsh:busybox-binsh:1.37.0-r31:*:*:*:*:*:*:*","cpe:2.3:a:busybox_binsh:busybox_binsh:1.37.0-r31:*:*:*:*:*:*:*","cpe:2.3:a:busybox:busybox-binsh:1.37.0-r31:*:*:*:*:*:*:*","cpe:2.3:a:busybox:busybox_binsh:1.37.0-r31:*:*:*:*:*:*:*"],"name":"busybox-binsh","purl":"pkg:apk/alpine/busybox-binsh@1.37.0-r31?arch=x86_64&distro=alpine-3.24.3&upstream=busybox","type":"apk","version":"1.37.0-r31","language":"","licenses":["GPL-2.0-only"],"metadata":{"Arch":"x86_64","files":[{"path":"/bin"},{"path":"/bin/sh"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:6e55090f9f3d41847bdfd6f69c7e7131e1de42c2746a9e88b1938eb12adb638f","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"busybox"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:busybox:busybox:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2025-60876","versionConstraint":"<= 1.37.0 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:busybox:busybox:1.37.0:*:*:*:*:*:*:*"],"package":{"name":"busybox","version":"1.37.0-r31"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2025-60876","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-60876","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-60876","date":"2026-10-30","epss":0.00312,"percentile":0.24125}],"risk":0.17939999999999998,"urls":["https://gist.github.com/subyumatest/41554af6a72aedaacaec026adc311092","https://lists.busybox.net/pipermail/busybox/attachments/20250823/ccdc96ef/attachment-0001.htm","https://lists.busybox.net/pipermail/busybox/attachments/20250828/e7f90492/attachment.htm","https://cert-portal.siemens.com/productcert/html/ssa-253495.html"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-60876","description":"BusyBox wget thru 1.3.7 accepted raw CR (0x0D)/LF (0x0A) and other C0 control bytes in the HTTP request-target (path/query), allowing the request line to be split and attacker-controlled headers to be injected. To preserve the HTTP/1.1 request-line shape METHOD SP request-target SP HTTP/1.1, a raw space (0x20) in the request-target must also be rejected (clients should use %20)."},"relatedVulnerabilities":[]},{"artifact":{"id":"8a9ef44e1018f213","cpes":["cpe:2.3:a:ssl-client:ssl-client:1.37.0-r31:*:*:*:*:*:*:*","cpe:2.3:a:ssl-client:ssl_client:1.37.0-r31:*:*:*:*:*:*:*","cpe:2.3:a:ssl_client:ssl-client:1.37.0-r31:*:*:*:*:*:*:*","cpe:2.3:a:ssl_client:ssl_client:1.37.0-r31:*:*:*:*:*:*:*","cpe:2.3:a:ssl:ssl-client:1.37.0-r31:*:*:*:*:*:*:*","cpe:2.3:a:ssl:ssl_client:1.37.0-r31:*:*:*:*:*:*:*"],"name":"ssl_client","purl":"pkg:apk/alpine/ssl_client@1.37.0-r31?arch=x86_64&distro=alpine-3.24.3&upstream=busybox","type":"apk","version":"1.37.0-r31","language":"","licenses":["GPL-2.0-only"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/ssl_client"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:6e55090f9f3d41847bdfd6f69c7e7131e1de42c2746a9e88b1938eb12adb638f","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"busybox"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:busybox:busybox:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2025-60876","versionConstraint":"<= 1.37.0 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:busybox:busybox:1.37.0:*:*:*:*:*:*:*"],"package":{"name":"busybox","version":"1.37.0-r31"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2025-60876","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-60876","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-60876","date":"2026-10-30","epss":0.00312,"percentile":0.24125}],"risk":0.17939999999999998,"urls":["https://gist.github.com/subyumatest/41554af6a72aedaacaec026adc311092","https://lists.busybox.net/pipermail/busybox/attachments/20250823/ccdc96ef/attachment-0001.htm","https://lists.busybox.net/pipermail/busybox/attachments/20250828/e7f90492/attachment.htm","https://cert-portal.siemens.com/productcert/html/ssa-253495.html"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-60876","description":"BusyBox wget thru 1.3.7 accepted raw CR (0x0D)/LF (0x0A) and other C0 control bytes in the HTTP request-target (path/query), allowing the request line to be split and attacker-controlled headers to be injected. To preserve the HTTP/1.1 request-line shape METHOD SP request-target SP HTTP/1.1, a raw space (0x20) in the request-target must also be rejected (clients should use %20)."},"relatedVulnerabilities":[]},{"artifact":{"id":"90939566e683abd3","cpes":["cpe:2.3:a:wget:wget:1.25.0-r3:*:*:*:*:*:*:*","cpe:2.3:a:gnu:wget:1.25.0-r3:*:*:*:*:*:*:*"],"name":"wget","purl":"pkg:apk/alpine/wget@1.25.0-r3?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"1.25.0-r3","language":"","licenses":["GPL-3.0-or-later","OpenSSL-Exception","WITH"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/wgetrc"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/wget"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:6e55090f9f3d41847bdfd6f69c7e7131e1de42c2746a9e88b1938eb12adb638f","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"wget"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:gnu:wget:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-58470","versionConstraint":"<= 1.25.0 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:gnu:wget:1.25.0:*:*:*:*:*:*:*"],"package":{"name":"wget","version":"1.25.0-r3"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-58470","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.9},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-58470","cwe":"CWE-190","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-58470","date":"2026-10-30","epss":0.00247,"percentile":0.16064}],"risk":0.13708499999999998,"urls":["https://gitlab.com/gnuwget/wget/-/commit/43d3ba9336bc94937e6fae2365c6ffd30c34ffcf","https://www.vulncheck.com/advisories/gnu-wget-integer-overflow-via-content-range-header-parsing"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-58470","description":"GNU Wget through 1.25.0, fixed in commit 43d3ba9, contains an integer overflow vulnerability in the parse_content_range() function within src/http.c that allows server-controlled values to cause signed integer arithmetic to overflow. Attackers can supply malicious Content-Range header values to trigger undefined behavior and download desynchronization in the affected client."},"relatedVulnerabilities":[]},{"artifact":{"id":"56144b5ac3e92bcb","cpes":["cpe:2.3:a:binutils:binutils:2.45.1-r1:*:*:*:*:*:*:*","cpe:2.3:a:gnu:binutils:2.45.1-r1:*:*:*:*:*:*:*"],"name":"binutils","purl":"pkg:apk/alpine/binutils@2.45.1-r1?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"2.45.1-r1","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later AND BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/addr2line"},{"path":"/usr/bin/ar"},{"path":"/usr/bin/as"},{"path":"/usr/bin/c++filt"},{"path":"/usr/bin/dwp"},{"path":"/usr/bin/elfedit"},{"path":"/usr/bin/gprof"},{"path":"/usr/bin/ld"},{"path":"/usr/bin/ld.bfd"},{"path":"/usr/bin/nm"},{"path":"/usr/bin/objcopy"},{"path":"/usr/bin/objdump"},{"path":"/usr/bin/ranlib"},{"path":"/usr/bin/readelf"},{"path":"/usr/bin/size"},{"path":"/usr/bin/strings"},{"path":"/usr/bin/strip"},{"path":"/usr/lib"},{"path":"/usr/lib/libbfd-2.45.1.so"},{"path":"/usr/lib/libctf-nobfd.so.0"},{"path":"/usr/lib/libctf-nobfd.so.0.0.0"},{"path":"/usr/lib/libctf.so.0"},{"path":"/usr/lib/libctf.so.0.0.0"},{"path":"/usr/lib/libopcodes-2.45.1.so"},{"path":"/usr/lib/libsframe.so.2"},{"path":"/usr/lib/libsframe.so.2.0.0"},{"path":"/usr/lib/bfd-plugins"},{"path":"/usr/lib/bfd-plugins/libdep.so"},{"path":"/usr/x86_64-alpine-linux-musl"},{"path":"/usr/x86_64-alpine-linux-musl/bin"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ar"},{"path":"/usr/x86_64-alpine-linux-musl/bin/as"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ld"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ld.bfd"},{"path":"/usr/x86_64-alpine-linux-musl/bin/nm"},{"path":"/usr/x86_64-alpine-linux-musl/bin/objcopy"},{"path":"/usr/x86_64-alpine-linux-musl/bin/objdump"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ranlib"},{"path":"/usr/x86_64-alpine-linux-musl/bin/readelf"},{"path":"/usr/x86_64-alpine-linux-musl/bin/strip"},{"path":"/usr/x86_64-alpine-linux-musl/lib"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xa"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xa"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/stamp"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:6e55090f9f3d41847bdfd6f69c7e7131e1de42c2746a9e88b1938eb12adb638f","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"binutils"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:gnu:binutils:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-3441","versionConstraint":"none (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:gnu:binutils:2.45.1:*:*:*:*:*:*:*"],"package":{"name":"binutils","version":"2.45.1-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-3441","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H","metrics":{"baseScore":7.1,"impactScore":5.2,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:L","metrics":{"baseScore":6.1,"impactScore":4.3,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-3441","cwe":"CWE-125","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-3441","date":"2026-10-30","epss":0.00187,"percentile":0.08304}],"risk":0.13183499999999998,"urls":["https://access.redhat.com/errata/RHSA-2026:33527","https://access.redhat.com/errata/RHSA-2026:39022","https://access.redhat.com/security/cve/CVE-2026-3441","https://bugzilla.redhat.com/show_bug.cgi?id=2443826"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-3441","description":"A flaw was found in GNU Binutils. This heap-based buffer overflow vulnerability, specifically an out-of-bounds read in the bfd linker, allows an attacker to gain access to sensitive information. By convincing a user to process a specially crafted XCOFF object file, an attacker can trigger this flaw, potentially leading to information disclosure or an application level denial of service."},"relatedVulnerabilities":[]},{"artifact":{"id":"56144b5ac3e92bcb","cpes":["cpe:2.3:a:binutils:binutils:2.45.1-r1:*:*:*:*:*:*:*","cpe:2.3:a:gnu:binutils:2.45.1-r1:*:*:*:*:*:*:*"],"name":"binutils","purl":"pkg:apk/alpine/binutils@2.45.1-r1?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"2.45.1-r1","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later AND BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/addr2line"},{"path":"/usr/bin/ar"},{"path":"/usr/bin/as"},{"path":"/usr/bin/c++filt"},{"path":"/usr/bin/dwp"},{"path":"/usr/bin/elfedit"},{"path":"/usr/bin/gprof"},{"path":"/usr/bin/ld"},{"path":"/usr/bin/ld.bfd"},{"path":"/usr/bin/nm"},{"path":"/usr/bin/objcopy"},{"path":"/usr/bin/objdump"},{"path":"/usr/bin/ranlib"},{"path":"/usr/bin/readelf"},{"path":"/usr/bin/size"},{"path":"/usr/bin/strings"},{"path":"/usr/bin/strip"},{"path":"/usr/lib"},{"path":"/usr/lib/libbfd-2.45.1.so"},{"path":"/usr/lib/libctf-nobfd.so.0"},{"path":"/usr/lib/libctf-nobfd.so.0.0.0"},{"path":"/usr/lib/libctf.so.0"},{"path":"/usr/lib/libctf.so.0.0.0"},{"path":"/usr/lib/libopcodes-2.45.1.so"},{"path":"/usr/lib/libsframe.so.2"},{"path":"/usr/lib/libsframe.so.2.0.0"},{"path":"/usr/lib/bfd-plugins"},{"path":"/usr/lib/bfd-plugins/libdep.so"},{"path":"/usr/x86_64-alpine-linux-musl"},{"path":"/usr/x86_64-alpine-linux-musl/bin"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ar"},{"path":"/usr/x86_64-alpine-linux-musl/bin/as"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ld"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ld.bfd"},{"path":"/usr/x86_64-alpine-linux-musl/bin/nm"},{"path":"/usr/x86_64-alpine-linux-musl/bin/objcopy"},{"path":"/usr/x86_64-alpine-linux-musl/bin/objdump"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ranlib"},{"path":"/usr/x86_64-alpine-linux-musl/bin/readelf"},{"path":"/usr/x86_64-alpine-linux-musl/bin/strip"},{"path":"/usr/x86_64-alpine-linux-musl/lib"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xa"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xa"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/stamp"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:6e55090f9f3d41847bdfd6f69c7e7131e1de42c2746a9e88b1938eb12adb638f","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"binutils"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:gnu:binutils:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2025-69651","versionConstraint":"<= 2.46 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:gnu:binutils:2.45.1:*:*:*:*:*:*:*"],"package":{"name":"binutils","version":"2.45.1-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2025-69651","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-69651","cwe":"CWE-476","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-69651","date":"2026-10-30","epss":0.0025,"percentile":0.16387}],"risk":0.13125,"urls":["https://sourceware.org/bugzilla/show_bug.cgi?id=33698","https://sourceware.org/bugzilla/show_bug.cgi?id=33700","https://sourceware.org/git/?p=binutils-gdb.git;a=commitdiff;h=81e90cf63a10ad11772c2437c8f2a88f1a00c739","https://sourceware.org/git/?p=binutils-gdb.git;a=commitdiff;h=ea4bc025abdba85a90e26e13f551c16a44bfa92","https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=ea4bc025abdba85a90e26e13f551c16a44bfa921"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-69651","description":"GNU Binutils thru 2.46 readelf contains a vulnerability that leads to an invalid pointer free when processing a crafted ELF binary with malformed relocation or symbol data. If dump_relocations returns early due to parsing errors, the internal all_relocations array may remain partially uninitialized. Later, process_got_section_contents() may attempt to free an invalid r_symbol pointer, triggering memory corruption checks in glibc and causing the program to terminate with SIGABRT. No evidence of further memory corruption or code execution was observed; the impact is limited to denial of service. NOTE: this is disputed by third parties because the observed behavior occurred only in pre-release code and did not affect any tagged version."},"relatedVulnerabilities":[]},{"artifact":{"id":"56144b5ac3e92bcb","cpes":["cpe:2.3:a:binutils:binutils:2.45.1-r1:*:*:*:*:*:*:*","cpe:2.3:a:gnu:binutils:2.45.1-r1:*:*:*:*:*:*:*"],"name":"binutils","purl":"pkg:apk/alpine/binutils@2.45.1-r1?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"2.45.1-r1","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later AND BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/addr2line"},{"path":"/usr/bin/ar"},{"path":"/usr/bin/as"},{"path":"/usr/bin/c++filt"},{"path":"/usr/bin/dwp"},{"path":"/usr/bin/elfedit"},{"path":"/usr/bin/gprof"},{"path":"/usr/bin/ld"},{"path":"/usr/bin/ld.bfd"},{"path":"/usr/bin/nm"},{"path":"/usr/bin/objcopy"},{"path":"/usr/bin/objdump"},{"path":"/usr/bin/ranlib"},{"path":"/usr/bin/readelf"},{"path":"/usr/bin/size"},{"path":"/usr/bin/strings"},{"path":"/usr/bin/strip"},{"path":"/usr/lib"},{"path":"/usr/lib/libbfd-2.45.1.so"},{"path":"/usr/lib/libctf-nobfd.so.0"},{"path":"/usr/lib/libctf-nobfd.so.0.0.0"},{"path":"/usr/lib/libctf.so.0"},{"path":"/usr/lib/libctf.so.0.0.0"},{"path":"/usr/lib/libopcodes-2.45.1.so"},{"path":"/usr/lib/libsframe.so.2"},{"path":"/usr/lib/libsframe.so.2.0.0"},{"path":"/usr/lib/bfd-plugins"},{"path":"/usr/lib/bfd-plugins/libdep.so"},{"path":"/usr/x86_64-alpine-linux-musl"},{"path":"/usr/x86_64-alpine-linux-musl/bin"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ar"},{"path":"/usr/x86_64-alpine-linux-musl/bin/as"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ld"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ld.bfd"},{"path":"/usr/x86_64-alpine-linux-musl/bin/nm"},{"path":"/usr/x86_64-alpine-linux-musl/bin/objcopy"},{"path":"/usr/x86_64-alpine-linux-musl/bin/objdump"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ranlib"},{"path":"/usr/x86_64-alpine-linux-musl/bin/readelf"},{"path":"/usr/x86_64-alpine-linux-musl/bin/strip"},{"path":"/usr/x86_64-alpine-linux-musl/lib"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xa"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xa"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/stamp"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:6e55090f9f3d41847bdfd6f69c7e7131e1de42c2746a9e88b1938eb12adb638f","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"binutils"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:gnu:binutils:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-6846","versionConstraint":"<= 2.46 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:gnu:binutils:2.45.1:*:*:*:*:*:*:*"],"package":{"name":"binutils","version":"2.45.1-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-6846","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","metrics":{"baseScore":7.8,"impactScore":5.9,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-6846","cwe":"CWE-122","type":"Secondary","source":"secalert@redhat.com"},{"cve":"CVE-2026-6846","cwe":"CWE-122","type":"Secondary","source":"0b0ca135-0b70-47e7-9f44-1890c2a1c46c"}],"epss":[{"cve":"CVE-2026-6846","date":"2026-10-30","epss":0.00171,"percentile":0.0651}],"risk":0.130815,"urls":["https://access.redhat.com/errata/RHSA-2026:33527","https://access.redhat.com/errata/RHSA-2026:39022","https://access.redhat.com/security/cve/CVE-2026-6846","https://bugzilla.redhat.com/show_bug.cgi?id=2460006","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6846.json"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-6846","description":"A flaw was found in binutils. A heap-buffer-overflow vulnerability exists when processing a specially crafted XCOFF (Extended Common Object File Format) object file during linking. A local attacker could trick a user into processing this malicious file, which could lead to arbitrary code execution, allowing the attacker to run unauthorized commands, or cause a denial of service, making the system unavailable."},"relatedVulnerabilities":[]},{"artifact":{"id":"56144b5ac3e92bcb","cpes":["cpe:2.3:a:binutils:binutils:2.45.1-r1:*:*:*:*:*:*:*","cpe:2.3:a:gnu:binutils:2.45.1-r1:*:*:*:*:*:*:*"],"name":"binutils","purl":"pkg:apk/alpine/binutils@2.45.1-r1?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"2.45.1-r1","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later AND BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/addr2line"},{"path":"/usr/bin/ar"},{"path":"/usr/bin/as"},{"path":"/usr/bin/c++filt"},{"path":"/usr/bin/dwp"},{"path":"/usr/bin/elfedit"},{"path":"/usr/bin/gprof"},{"path":"/usr/bin/ld"},{"path":"/usr/bin/ld.bfd"},{"path":"/usr/bin/nm"},{"path":"/usr/bin/objcopy"},{"path":"/usr/bin/objdump"},{"path":"/usr/bin/ranlib"},{"path":"/usr/bin/readelf"},{"path":"/usr/bin/size"},{"path":"/usr/bin/strings"},{"path":"/usr/bin/strip"},{"path":"/usr/lib"},{"path":"/usr/lib/libbfd-2.45.1.so"},{"path":"/usr/lib/libctf-nobfd.so.0"},{"path":"/usr/lib/libctf-nobfd.so.0.0.0"},{"path":"/usr/lib/libctf.so.0"},{"path":"/usr/lib/libctf.so.0.0.0"},{"path":"/usr/lib/libopcodes-2.45.1.so"},{"path":"/usr/lib/libsframe.so.2"},{"path":"/usr/lib/libsframe.so.2.0.0"},{"path":"/usr/lib/bfd-plugins"},{"path":"/usr/lib/bfd-plugins/libdep.so"},{"path":"/usr/x86_64-alpine-linux-musl"},{"path":"/usr/x86_64-alpine-linux-musl/bin"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ar"},{"path":"/usr/x86_64-alpine-linux-musl/bin/as"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ld"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ld.bfd"},{"path":"/usr/x86_64-alpine-linux-musl/bin/nm"},{"path":"/usr/x86_64-alpine-linux-musl/bin/objcopy"},{"path":"/usr/x86_64-alpine-linux-musl/bin/objdump"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ranlib"},{"path":"/usr/x86_64-alpine-linux-musl/bin/readelf"},{"path":"/usr/x86_64-alpine-linux-musl/bin/strip"},{"path":"/usr/x86_64-alpine-linux-musl/lib"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xa"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xa"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/stamp"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:6e55090f9f3d41847bdfd6f69c7e7131e1de42c2746a9e88b1938eb12adb638f","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"binutils"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:gnu:binutils:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2025-69652","versionConstraint":"<= 2.46 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:gnu:binutils:2.45.1:*:*:*:*:*:*:*"],"package":{"name":"binutils","version":"2.45.1-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2025-69652","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.2,"impactScore":3.6,"exploitabilityScore":2.6},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-69652","cwe":"CWE-460","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-69652","date":"2026-10-30","epss":0.00183,"percentile":0.07943}],"risk":0.10248000000000002,"urls":["https://sourceware.org/bugzilla/show_bug.cgi?id=33701","https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=44b79abd0fa12e7947252eb4c6e5d16ed6033e01"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-69652","description":"GNU Binutils thru 2.46 readelf contains a vulnerability that leads to an abort (SIGABRT) when processing a crafted ELF binary with malformed DWARF abbrev or debug information. Due to incomplete state cleanup in process_debug_info(), an invalid debug_info_p state may propagate into DWARF attribute parsing routines. When certain malformed attributes result in an unexpected data length of zero, byte_get_little_endian() triggers a fatal abort. No evidence of memory corruption or code execution was observed; the impact is limited to denial of service."},"relatedVulnerabilities":[]},{"artifact":{"id":"56144b5ac3e92bcb","cpes":["cpe:2.3:a:binutils:binutils:2.45.1-r1:*:*:*:*:*:*:*","cpe:2.3:a:gnu:binutils:2.45.1-r1:*:*:*:*:*:*:*"],"name":"binutils","purl":"pkg:apk/alpine/binutils@2.45.1-r1?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"2.45.1-r1","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later AND BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/addr2line"},{"path":"/usr/bin/ar"},{"path":"/usr/bin/as"},{"path":"/usr/bin/c++filt"},{"path":"/usr/bin/dwp"},{"path":"/usr/bin/elfedit"},{"path":"/usr/bin/gprof"},{"path":"/usr/bin/ld"},{"path":"/usr/bin/ld.bfd"},{"path":"/usr/bin/nm"},{"path":"/usr/bin/objcopy"},{"path":"/usr/bin/objdump"},{"path":"/usr/bin/ranlib"},{"path":"/usr/bin/readelf"},{"path":"/usr/bin/size"},{"path":"/usr/bin/strings"},{"path":"/usr/bin/strip"},{"path":"/usr/lib"},{"path":"/usr/lib/libbfd-2.45.1.so"},{"path":"/usr/lib/libctf-nobfd.so.0"},{"path":"/usr/lib/libctf-nobfd.so.0.0.0"},{"path":"/usr/lib/libctf.so.0"},{"path":"/usr/lib/libctf.so.0.0.0"},{"path":"/usr/lib/libopcodes-2.45.1.so"},{"path":"/usr/lib/libsframe.so.2"},{"path":"/usr/lib/libsframe.so.2.0.0"},{"path":"/usr/lib/bfd-plugins"},{"path":"/usr/lib/bfd-plugins/libdep.so"},{"path":"/usr/x86_64-alpine-linux-musl"},{"path":"/usr/x86_64-alpine-linux-musl/bin"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ar"},{"path":"/usr/x86_64-alpine-linux-musl/bin/as"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ld"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ld.bfd"},{"path":"/usr/x86_64-alpine-linux-musl/bin/nm"},{"path":"/usr/x86_64-alpine-linux-musl/bin/objcopy"},{"path":"/usr/x86_64-alpine-linux-musl/bin/objdump"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ranlib"},{"path":"/usr/x86_64-alpine-linux-musl/bin/readelf"},{"path":"/usr/x86_64-alpine-linux-musl/bin/strip"},{"path":"/usr/x86_64-alpine-linux-musl/lib"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xa"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xa"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/stamp"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:6e55090f9f3d41847bdfd6f69c7e7131e1de42c2746a9e88b1938eb12adb638f","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"binutils"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:gnu:binutils:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2025-69648","versionConstraint":"<= 2.45.1 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:gnu:binutils:2.45.1:*:*:*:*:*:*:*"],"package":{"name":"binutils","version":"2.45.1-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2025-69648","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.2,"impactScore":3.6,"exploitabilityScore":2.6},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-69648","cwe":"CWE-835","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-69648","date":"2026-10-30","epss":0.00183,"percentile":0.07928}],"risk":0.10248000000000002,"urls":["https://sourceware.org/bugzilla/show_bug.cgi?id=33641","https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=598704a00cbac5e85c2bedd363357b5bf6fcee33"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-69648","description":"GNU Binutils thru 2.45.1 readelf contains a denial-of-service vulnerability when processing a crafted binary with malformed DWARF .debug_rnglists data. A logic flaw in the DWARF parsing path causes readelf to repeatedly print the same warning message without making forward progress, resulting in a non-terminating output loop that requires manual interruption. No evidence of memory corruption or code execution was observed."},"relatedVulnerabilities":[]},{"artifact":{"id":"56144b5ac3e92bcb","cpes":["cpe:2.3:a:binutils:binutils:2.45.1-r1:*:*:*:*:*:*:*","cpe:2.3:a:gnu:binutils:2.45.1-r1:*:*:*:*:*:*:*"],"name":"binutils","purl":"pkg:apk/alpine/binutils@2.45.1-r1?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"2.45.1-r1","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later AND BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/addr2line"},{"path":"/usr/bin/ar"},{"path":"/usr/bin/as"},{"path":"/usr/bin/c++filt"},{"path":"/usr/bin/dwp"},{"path":"/usr/bin/elfedit"},{"path":"/usr/bin/gprof"},{"path":"/usr/bin/ld"},{"path":"/usr/bin/ld.bfd"},{"path":"/usr/bin/nm"},{"path":"/usr/bin/objcopy"},{"path":"/usr/bin/objdump"},{"path":"/usr/bin/ranlib"},{"path":"/usr/bin/readelf"},{"path":"/usr/bin/size"},{"path":"/usr/bin/strings"},{"path":"/usr/bin/strip"},{"path":"/usr/lib"},{"path":"/usr/lib/libbfd-2.45.1.so"},{"path":"/usr/lib/libctf-nobfd.so.0"},{"path":"/usr/lib/libctf-nobfd.so.0.0.0"},{"path":"/usr/lib/libctf.so.0"},{"path":"/usr/lib/libctf.so.0.0.0"},{"path":"/usr/lib/libopcodes-2.45.1.so"},{"path":"/usr/lib/libsframe.so.2"},{"path":"/usr/lib/libsframe.so.2.0.0"},{"path":"/usr/lib/bfd-plugins"},{"path":"/usr/lib/bfd-plugins/libdep.so"},{"path":"/usr/x86_64-alpine-linux-musl"},{"path":"/usr/x86_64-alpine-linux-musl/bin"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ar"},{"path":"/usr/x86_64-alpine-linux-musl/bin/as"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ld"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ld.bfd"},{"path":"/usr/x86_64-alpine-linux-musl/bin/nm"},{"path":"/usr/x86_64-alpine-linux-musl/bin/objcopy"},{"path":"/usr/x86_64-alpine-linux-musl/bin/objdump"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ranlib"},{"path":"/usr/x86_64-alpine-linux-musl/bin/readelf"},{"path":"/usr/x86_64-alpine-linux-musl/bin/strip"},{"path":"/usr/x86_64-alpine-linux-musl/lib"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xa"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xa"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/stamp"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:6e55090f9f3d41847bdfd6f69c7e7131e1de42c2746a9e88b1938eb12adb638f","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"binutils"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:gnu:binutils:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-4647","versionConstraint":"none (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:gnu:binutils:2.45.1:*:*:*:*:*:*:*"],"package":{"name":"binutils","version":"2.45.1-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-4647","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H","metrics":{"baseScore":6.1,"impactScore":4.3,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H","metrics":{"baseScore":6.1,"impactScore":4.3,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-4647","cwe":"CWE-125","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-4647","date":"2026-10-30","epss":0.00171,"percentile":0.06516}],"risk":0.09490499999999999,"urls":["https://access.redhat.com/errata/RHSA-2026:33527","https://access.redhat.com/errata/RHSA-2026:39022","https://access.redhat.com/security/cve/CVE-2026-4647","https://bugzilla.redhat.com/show_bug.cgi?id=2450302","https://sourceware.org/bugzilla/show_bug.cgi?id=33919"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-4647","description":"A flaw was found in the GNU Binutils BFD library, a widely used component for handling binary files such as object files and executables. The issue occurs when processing specially crafted XCOFF object files, where a relocation type value is not properly validated before being used. This can cause the program to read memory outside of intended bounds. As a result, affected tools may crash or expose unintended memory contents, leading to denial-of-service or limited information disclosure risks."},"relatedVulnerabilities":[]},{"artifact":{"id":"56144b5ac3e92bcb","cpes":["cpe:2.3:a:binutils:binutils:2.45.1-r1:*:*:*:*:*:*:*","cpe:2.3:a:gnu:binutils:2.45.1-r1:*:*:*:*:*:*:*"],"name":"binutils","purl":"pkg:apk/alpine/binutils@2.45.1-r1?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"2.45.1-r1","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later AND BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/addr2line"},{"path":"/usr/bin/ar"},{"path":"/usr/bin/as"},{"path":"/usr/bin/c++filt"},{"path":"/usr/bin/dwp"},{"path":"/usr/bin/elfedit"},{"path":"/usr/bin/gprof"},{"path":"/usr/bin/ld"},{"path":"/usr/bin/ld.bfd"},{"path":"/usr/bin/nm"},{"path":"/usr/bin/objcopy"},{"path":"/usr/bin/objdump"},{"path":"/usr/bin/ranlib"},{"path":"/usr/bin/readelf"},{"path":"/usr/bin/size"},{"path":"/usr/bin/strings"},{"path":"/usr/bin/strip"},{"path":"/usr/lib"},{"path":"/usr/lib/libbfd-2.45.1.so"},{"path":"/usr/lib/libctf-nobfd.so.0"},{"path":"/usr/lib/libctf-nobfd.so.0.0.0"},{"path":"/usr/lib/libctf.so.0"},{"path":"/usr/lib/libctf.so.0.0.0"},{"path":"/usr/lib/libopcodes-2.45.1.so"},{"path":"/usr/lib/libsframe.so.2"},{"path":"/usr/lib/libsframe.so.2.0.0"},{"path":"/usr/lib/bfd-plugins"},{"path":"/usr/lib/bfd-plugins/libdep.so"},{"path":"/usr/x86_64-alpine-linux-musl"},{"path":"/usr/x86_64-alpine-linux-musl/bin"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ar"},{"path":"/usr/x86_64-alpine-linux-musl/bin/as"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ld"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ld.bfd"},{"path":"/usr/x86_64-alpine-linux-musl/bin/nm"},{"path":"/usr/x86_64-alpine-linux-musl/bin/objcopy"},{"path":"/usr/x86_64-alpine-linux-musl/bin/objdump"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ranlib"},{"path":"/usr/x86_64-alpine-linux-musl/bin/readelf"},{"path":"/usr/x86_64-alpine-linux-musl/bin/strip"},{"path":"/usr/x86_64-alpine-linux-musl/lib"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xa"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xa"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/stamp"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:6e55090f9f3d41847bdfd6f69c7e7131e1de42c2746a9e88b1938eb12adb638f","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"binutils"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:gnu:binutils:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2025-69647","versionConstraint":"<= 2.45.1 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:gnu:binutils:2.45.1:*:*:*:*:*:*:*"],"package":{"name":"binutils","version":"2.45.1-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2025-69647","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.2,"impactScore":3.6,"exploitabilityScore":2.6},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-69647","cwe":"CWE-835","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-69647","date":"2026-10-30","epss":0.00162,"percentile":0.05325}],"risk":0.09072000000000001,"urls":["https://sourceware.org/bugzilla/show_bug.cgi?id=33640","https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=455446bbdc8675f34808187de2bbad4682016ff7"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-69647","description":"GNU Binutils thru 2.45.1 readelf contains a denial-of-service vulnerability when processing a crafted binary with malformed DWARF loclists data. A logic flaw in the DWARF parsing code can cause readelf to repeatedly print the same table output without making forward progress, resulting in an unbounded output loop that never terminates unless externally interrupted. A local attacker can trigger this behavior by supplying a malicious input file, causing excessive CPU and I/O usage and preventing readelf from completing its analysis."},"relatedVulnerabilities":[]},{"artifact":{"id":"6921667c3af65467","cpes":["cpe:2.3:a:coreutils:coreutils:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:gnu:coreutils:9.11-r0:*:*:*:*:*:*:*"],"name":"coreutils","purl":"pkg:apk/alpine/coreutils@9.11-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"9.11-r0","language":"","licenses":["GPL-3.0-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/bin"},{"path":"/bin/base64"},{"path":"/bin/cat"},{"path":"/bin/chgrp"},{"path":"/bin/chmod"},{"path":"/bin/chown"},{"path":"/bin/coreutils"},{"path":"/bin/cp"},{"path":"/bin/date"},{"path":"/bin/dd"},{"path":"/bin/df"},{"path":"/bin/echo"},{"path":"/bin/false"},{"path":"/bin/link"},{"path":"/bin/ln"},{"path":"/bin/ls"},{"path":"/bin/mkdir"},{"path":"/bin/mknod"},{"path":"/bin/mktemp"},{"path":"/bin/mv"},{"path":"/bin/nice"},{"path":"/bin/printenv"},{"path":"/bin/pwd"},{"path":"/bin/rm"},{"path":"/bin/rmdir"},{"path":"/bin/sleep"},{"path":"/bin/stat"},{"path":"/bin/stty"},{"path":"/bin/sync"},{"path":"/bin/touch"},{"path":"/bin/true"},{"path":"/bin/uname"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/["},{"path":"/usr/bin/b2sum"},{"path":"/usr/bin/base32"},{"path":"/usr/bin/basename"},{"path":"/usr/bin/basenc"},{"path":"/usr/bin/cksum"},{"path":"/usr/bin/comm"},{"path":"/usr/bin/csplit"},{"path":"/usr/bin/cut"},{"path":"/usr/bin/dir"},{"path":"/usr/bin/dircolors"},{"path":"/usr/bin/dirname"},{"path":"/usr/bin/du"},{"path":"/usr/bin/expand"},{"path":"/usr/bin/expr"},{"path":"/usr/bin/factor"},{"path":"/usr/bin/fold"},{"path":"/usr/bin/head"},{"path":"/usr/bin/hostid"},{"path":"/usr/bin/id"},{"path":"/usr/bin/install"},{"path":"/usr/bin/join"},{"path":"/usr/bin/logname"},{"path":"/usr/bin/md5sum"},{"path":"/usr/bin/mkfifo"},{"path":"/usr/bin/nl"},{"path":"/usr/bin/nohup"},{"path":"/usr/bin/nproc"},{"path":"/usr/bin/numfmt"},{"path":"/usr/bin/od"},{"path":"/usr/bin/paste"},{"path":"/usr/bin/pathchk"},{"path":"/usr/bin/pinky"},{"path":"/usr/bin/pr"},{"path":"/usr/bin/printf"},{"path":"/usr/bin/ptx"},{"path":"/usr/bin/readlink"},{"path":"/usr/bin/realpath"},{"path":"/usr/bin/seq"},{"path":"/usr/bin/sha1sum"},{"path":"/usr/bin/sha224sum"},{"path":"/usr/bin/sha256sum"},{"path":"/usr/bin/sha384sum"},{"path":"/usr/bin/shred"},{"path":"/usr/bin/shuf"},{"path":"/usr/bin/sort"},{"path":"/usr/bin/split"},{"path":"/usr/bin/stdbuf"},{"path":"/usr/bin/sum"},{"path":"/usr/bin/tac"},{"path":"/usr/bin/tail"},{"path":"/usr/bin/tee"},{"path":"/usr/bin/test"},{"path":"/usr/bin/timeout"},{"path":"/usr/bin/tr"},{"path":"/usr/bin/truncate"},{"path":"/usr/bin/tsort"},{"path":"/usr/bin/tty"},{"path":"/usr/bin/unexpand"},{"path":"/usr/bin/uniq"},{"path":"/usr/bin/unlink"},{"path":"/usr/bin/users"},{"path":"/usr/bin/vdir"},{"path":"/usr/bin/wc"},{"path":"/usr/bin/who"},{"path":"/usr/bin/whoami"},{"path":"/usr/bin/yes"},{"path":"/usr/libexec"},{"path":"/usr/libexec/coreutils"},{"path":"/usr/libexec/coreutils/libstdbuf.so"},{"path":"/usr/sbin"},{"path":"/usr/sbin/chroot"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:6e55090f9f3d41847bdfd6f69c7e7131e1de42c2746a9e88b1938eb12adb638f","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"coreutils"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:gnu:coreutils:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-56392","versionConstraint":"= 9.11 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:gnu:coreutils:9.11:*:*:*:*:*:*:*"],"package":{"name":"coreutils","version":"9.11-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-56392","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H","metrics":{"baseScore":6.1,"impactScore":4.3,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cvd@cert.pl","vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":1.8},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-56392","cwe":"CWE-122","type":"Secondary","source":"cvd@cert.pl"}],"epss":[{"cve":"CVE-2026-56392","date":"2026-10-30","epss":0.00186,"percentile":0.08236}],"risk":0.083235,"urls":["https://cert.pl/en/posts/2026/07/CVE-2026-56391","https://git.savannah.gnu.org/cgit/coreutils.git/","https://git.savannah.gnu.org/cgit/coreutils.git/commit/?id=b60a159fdc5bfcf9988d3a4cb6f53abe8ad5d35d"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-56392","description":"GNU coreutils unexpand is vulnerable to a heap-based buffer overflow due to an integer overflow during buffer allocation when processing large tab stop (-t) values. The multiplication used to calculate the allocation size can wrap around, resulting in an undersized buffer.\nWhen processing crafted input, subsequent writes exceed the allocated memory, leading to an out‑of‑bounds heap write.\n\nWhen running GNU coreutils unexpand with attacker-provided large tab stop (-t) arguments, this behavior leads to a crash and potentially achieve a heap write primitive depending on memory layout.\n\n\n\n\n\n\n\n\n\n\nThis issue has been fixed in the commit b60a159fdc5bfcf9988d3a4cb6f53abe8ad5d35d"},"relatedVulnerabilities":[]},{"artifact":{"id":"16361c4de507bb4c","cpes":["cpe:2.3:a:coreutils-env:coreutils-env:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils-env:coreutils_env:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils_env:coreutils-env:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils_env:coreutils_env:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils:coreutils-env:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils:coreutils_env:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:gnu:coreutils-env:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:gnu:coreutils_env:9.11-r0:*:*:*:*:*:*:*"],"name":"coreutils-env","purl":"pkg:apk/alpine/coreutils-env@9.11-r0?arch=x86_64&distro=alpine-3.24.3&upstream=coreutils","type":"apk","version":"9.11-r0","language":"","licenses":["GPL-3.0-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/env"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:6e55090f9f3d41847bdfd6f69c7e7131e1de42c2746a9e88b1938eb12adb638f","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"coreutils"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:gnu:coreutils:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-56392","versionConstraint":"= 9.11 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:gnu:coreutils:9.11:*:*:*:*:*:*:*"],"package":{"name":"coreutils","version":"9.11-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-56392","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H","metrics":{"baseScore":6.1,"impactScore":4.3,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cvd@cert.pl","vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":1.8},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-56392","cwe":"CWE-122","type":"Secondary","source":"cvd@cert.pl"}],"epss":[{"cve":"CVE-2026-56392","date":"2026-10-30","epss":0.00186,"percentile":0.08236}],"risk":0.083235,"urls":["https://cert.pl/en/posts/2026/07/CVE-2026-56391","https://git.savannah.gnu.org/cgit/coreutils.git/","https://git.savannah.gnu.org/cgit/coreutils.git/commit/?id=b60a159fdc5bfcf9988d3a4cb6f53abe8ad5d35d"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-56392","description":"GNU coreutils unexpand is vulnerable to a heap-based buffer overflow due to an integer overflow during buffer allocation when processing large tab stop (-t) values. The multiplication used to calculate the allocation size can wrap around, resulting in an undersized buffer.\nWhen processing crafted input, subsequent writes exceed the allocated memory, leading to an out‑of‑bounds heap write.\n\nWhen running GNU coreutils unexpand with attacker-provided large tab stop (-t) arguments, this behavior leads to a crash and potentially achieve a heap write primitive depending on memory layout.\n\n\n\n\n\n\n\n\n\n\nThis issue has been fixed in the commit b60a159fdc5bfcf9988d3a4cb6f53abe8ad5d35d"},"relatedVulnerabilities":[]},{"artifact":{"id":"0c43a637992609b6","cpes":["cpe:2.3:a:coreutils-fmt:coreutils-fmt:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils-fmt:coreutils_fmt:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils_fmt:coreutils-fmt:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils_fmt:coreutils_fmt:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils:coreutils-fmt:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils:coreutils_fmt:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:gnu:coreutils-fmt:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:gnu:coreutils_fmt:9.11-r0:*:*:*:*:*:*:*"],"name":"coreutils-fmt","purl":"pkg:apk/alpine/coreutils-fmt@9.11-r0?arch=x86_64&distro=alpine-3.24.3&upstream=coreutils","type":"apk","version":"9.11-r0","language":"","licenses":["GPL-3.0-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/fmt"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:6e55090f9f3d41847bdfd6f69c7e7131e1de42c2746a9e88b1938eb12adb638f","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"coreutils"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:gnu:coreutils:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-56392","versionConstraint":"= 9.11 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:gnu:coreutils:9.11:*:*:*:*:*:*:*"],"package":{"name":"coreutils","version":"9.11-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-56392","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H","metrics":{"baseScore":6.1,"impactScore":4.3,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cvd@cert.pl","vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":1.8},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-56392","cwe":"CWE-122","type":"Secondary","source":"cvd@cert.pl"}],"epss":[{"cve":"CVE-2026-56392","date":"2026-10-30","epss":0.00186,"percentile":0.08236}],"risk":0.083235,"urls":["https://cert.pl/en/posts/2026/07/CVE-2026-56391","https://git.savannah.gnu.org/cgit/coreutils.git/","https://git.savannah.gnu.org/cgit/coreutils.git/commit/?id=b60a159fdc5bfcf9988d3a4cb6f53abe8ad5d35d"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-56392","description":"GNU coreutils unexpand is vulnerable to a heap-based buffer overflow due to an integer overflow during buffer allocation when processing large tab stop (-t) values. The multiplication used to calculate the allocation size can wrap around, resulting in an undersized buffer.\nWhen processing crafted input, subsequent writes exceed the allocated memory, leading to an out‑of‑bounds heap write.\n\nWhen running GNU coreutils unexpand with attacker-provided large tab stop (-t) arguments, this behavior leads to a crash and potentially achieve a heap write primitive depending on memory layout.\n\n\n\n\n\n\n\n\n\n\nThis issue has been fixed in the commit b60a159fdc5bfcf9988d3a4cb6f53abe8ad5d35d"},"relatedVulnerabilities":[]},{"artifact":{"id":"157238390cea3b89","cpes":["cpe:2.3:a:coreutils-sha512sum:coreutils-sha512sum:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils-sha512sum:coreutils_sha512sum:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils_sha512sum:coreutils-sha512sum:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils_sha512sum:coreutils_sha512sum:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils:coreutils-sha512sum:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils:coreutils_sha512sum:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:gnu:coreutils-sha512sum:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:gnu:coreutils_sha512sum:9.11-r0:*:*:*:*:*:*:*"],"name":"coreutils-sha512sum","purl":"pkg:apk/alpine/coreutils-sha512sum@9.11-r0?arch=x86_64&distro=alpine-3.24.3&upstream=coreutils","type":"apk","version":"9.11-r0","language":"","licenses":["GPL-3.0-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/sha512sum"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:6e55090f9f3d41847bdfd6f69c7e7131e1de42c2746a9e88b1938eb12adb638f","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"coreutils"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:gnu:coreutils:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-56392","versionConstraint":"= 9.11 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:gnu:coreutils:9.11:*:*:*:*:*:*:*"],"package":{"name":"coreutils","version":"9.11-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-56392","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H","metrics":{"baseScore":6.1,"impactScore":4.3,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cvd@cert.pl","vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":1.8},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-56392","cwe":"CWE-122","type":"Secondary","source":"cvd@cert.pl"}],"epss":[{"cve":"CVE-2026-56392","date":"2026-10-30","epss":0.00186,"percentile":0.08236}],"risk":0.083235,"urls":["https://cert.pl/en/posts/2026/07/CVE-2026-56391","https://git.savannah.gnu.org/cgit/coreutils.git/","https://git.savannah.gnu.org/cgit/coreutils.git/commit/?id=b60a159fdc5bfcf9988d3a4cb6f53abe8ad5d35d"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-56392","description":"GNU coreutils unexpand is vulnerable to a heap-based buffer overflow due to an integer overflow during buffer allocation when processing large tab stop (-t) values. The multiplication used to calculate the allocation size can wrap around, resulting in an undersized buffer.\nWhen processing crafted input, subsequent writes exceed the allocated memory, leading to an out‑of‑bounds heap write.\n\nWhen running GNU coreutils unexpand with attacker-provided large tab stop (-t) arguments, this behavior leads to a crash and potentially achieve a heap write primitive depending on memory layout.\n\n\n\n\n\n\n\n\n\n\nThis issue has been fixed in the commit b60a159fdc5bfcf9988d3a4cb6f53abe8ad5d35d"},"relatedVulnerabilities":[]},{"artifact":{"id":"56144b5ac3e92bcb","cpes":["cpe:2.3:a:binutils:binutils:2.45.1-r1:*:*:*:*:*:*:*","cpe:2.3:a:gnu:binutils:2.45.1-r1:*:*:*:*:*:*:*"],"name":"binutils","purl":"pkg:apk/alpine/binutils@2.45.1-r1?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"2.45.1-r1","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later AND BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/addr2line"},{"path":"/usr/bin/ar"},{"path":"/usr/bin/as"},{"path":"/usr/bin/c++filt"},{"path":"/usr/bin/dwp"},{"path":"/usr/bin/elfedit"},{"path":"/usr/bin/gprof"},{"path":"/usr/bin/ld"},{"path":"/usr/bin/ld.bfd"},{"path":"/usr/bin/nm"},{"path":"/usr/bin/objcopy"},{"path":"/usr/bin/objdump"},{"path":"/usr/bin/ranlib"},{"path":"/usr/bin/readelf"},{"path":"/usr/bin/size"},{"path":"/usr/bin/strings"},{"path":"/usr/bin/strip"},{"path":"/usr/lib"},{"path":"/usr/lib/libbfd-2.45.1.so"},{"path":"/usr/lib/libctf-nobfd.so.0"},{"path":"/usr/lib/libctf-nobfd.so.0.0.0"},{"path":"/usr/lib/libctf.so.0"},{"path":"/usr/lib/libctf.so.0.0.0"},{"path":"/usr/lib/libopcodes-2.45.1.so"},{"path":"/usr/lib/libsframe.so.2"},{"path":"/usr/lib/libsframe.so.2.0.0"},{"path":"/usr/lib/bfd-plugins"},{"path":"/usr/lib/bfd-plugins/libdep.so"},{"path":"/usr/x86_64-alpine-linux-musl"},{"path":"/usr/x86_64-alpine-linux-musl/bin"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ar"},{"path":"/usr/x86_64-alpine-linux-musl/bin/as"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ld"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ld.bfd"},{"path":"/usr/x86_64-alpine-linux-musl/bin/nm"},{"path":"/usr/x86_64-alpine-linux-musl/bin/objcopy"},{"path":"/usr/x86_64-alpine-linux-musl/bin/objdump"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ranlib"},{"path":"/usr/x86_64-alpine-linux-musl/bin/readelf"},{"path":"/usr/x86_64-alpine-linux-musl/bin/strip"},{"path":"/usr/x86_64-alpine-linux-musl/lib"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xa"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xa"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/stamp"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:6e55090f9f3d41847bdfd6f69c7e7131e1de42c2746a9e88b1938eb12adb638f","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"binutils"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:gnu:binutils:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-6845","versionConstraint":"none (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:gnu:binutils:2.45.1:*:*:*:*:*:*:*"],"package":{"name":"binutils","version":"2.45.1-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-6845","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5,"impactScore":3.6,"exploitabilityScore":1.4},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-6845","cwe":"CWE-476","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-6845","date":"2026-10-30","epss":0.00147,"percentile":0.03891}],"risk":0.0735,"urls":["https://access.redhat.com/errata/RHSA-2026:34924","https://access.redhat.com/errata/RHSA-2026:39022","https://access.redhat.com/security/cve/CVE-2026-6845","https://bugzilla.redhat.com/show_bug.cgi?id=2460012"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-6845","description":"A flaw was found in binutils, specifically within the `readelf` utility. This vulnerability allows a local attacker to cause a Denial of Service (DoS) by tricking a user into processing a specially crafted Executable and Linkable Format (ELF) file. The exploitation of this flaw can lead to the system becoming unresponsive due to excessive resource consumption or a program crash."},"relatedVulnerabilities":[]},{"artifact":{"id":"6921667c3af65467","cpes":["cpe:2.3:a:coreutils:coreutils:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:gnu:coreutils:9.11-r0:*:*:*:*:*:*:*"],"name":"coreutils","purl":"pkg:apk/alpine/coreutils@9.11-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"9.11-r0","language":"","licenses":["GPL-3.0-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/bin"},{"path":"/bin/base64"},{"path":"/bin/cat"},{"path":"/bin/chgrp"},{"path":"/bin/chmod"},{"path":"/bin/chown"},{"path":"/bin/coreutils"},{"path":"/bin/cp"},{"path":"/bin/date"},{"path":"/bin/dd"},{"path":"/bin/df"},{"path":"/bin/echo"},{"path":"/bin/false"},{"path":"/bin/link"},{"path":"/bin/ln"},{"path":"/bin/ls"},{"path":"/bin/mkdir"},{"path":"/bin/mknod"},{"path":"/bin/mktemp"},{"path":"/bin/mv"},{"path":"/bin/nice"},{"path":"/bin/printenv"},{"path":"/bin/pwd"},{"path":"/bin/rm"},{"path":"/bin/rmdir"},{"path":"/bin/sleep"},{"path":"/bin/stat"},{"path":"/bin/stty"},{"path":"/bin/sync"},{"path":"/bin/touch"},{"path":"/bin/true"},{"path":"/bin/uname"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/["},{"path":"/usr/bin/b2sum"},{"path":"/usr/bin/base32"},{"path":"/usr/bin/basename"},{"path":"/usr/bin/basenc"},{"path":"/usr/bin/cksum"},{"path":"/usr/bin/comm"},{"path":"/usr/bin/csplit"},{"path":"/usr/bin/cut"},{"path":"/usr/bin/dir"},{"path":"/usr/bin/dircolors"},{"path":"/usr/bin/dirname"},{"path":"/usr/bin/du"},{"path":"/usr/bin/expand"},{"path":"/usr/bin/expr"},{"path":"/usr/bin/factor"},{"path":"/usr/bin/fold"},{"path":"/usr/bin/head"},{"path":"/usr/bin/hostid"},{"path":"/usr/bin/id"},{"path":"/usr/bin/install"},{"path":"/usr/bin/join"},{"path":"/usr/bin/logname"},{"path":"/usr/bin/md5sum"},{"path":"/usr/bin/mkfifo"},{"path":"/usr/bin/nl"},{"path":"/usr/bin/nohup"},{"path":"/usr/bin/nproc"},{"path":"/usr/bin/numfmt"},{"path":"/usr/bin/od"},{"path":"/usr/bin/paste"},{"path":"/usr/bin/pathchk"},{"path":"/usr/bin/pinky"},{"path":"/usr/bin/pr"},{"path":"/usr/bin/printf"},{"path":"/usr/bin/ptx"},{"path":"/usr/bin/readlink"},{"path":"/usr/bin/realpath"},{"path":"/usr/bin/seq"},{"path":"/usr/bin/sha1sum"},{"path":"/usr/bin/sha224sum"},{"path":"/usr/bin/sha256sum"},{"path":"/usr/bin/sha384sum"},{"path":"/usr/bin/shred"},{"path":"/usr/bin/shuf"},{"path":"/usr/bin/sort"},{"path":"/usr/bin/split"},{"path":"/usr/bin/stdbuf"},{"path":"/usr/bin/sum"},{"path":"/usr/bin/tac"},{"path":"/usr/bin/tail"},{"path":"/usr/bin/tee"},{"path":"/usr/bin/test"},{"path":"/usr/bin/timeout"},{"path":"/usr/bin/tr"},{"path":"/usr/bin/truncate"},{"path":"/usr/bin/tsort"},{"path":"/usr/bin/tty"},{"path":"/usr/bin/unexpand"},{"path":"/usr/bin/uniq"},{"path":"/usr/bin/unlink"},{"path":"/usr/bin/users"},{"path":"/usr/bin/vdir"},{"path":"/usr/bin/wc"},{"path":"/usr/bin/who"},{"path":"/usr/bin/whoami"},{"path":"/usr/bin/yes"},{"path":"/usr/libexec"},{"path":"/usr/libexec/coreutils"},{"path":"/usr/libexec/coreutils/libstdbuf.so"},{"path":"/usr/sbin"},{"path":"/usr/sbin/chroot"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:6e55090f9f3d41847bdfd6f69c7e7131e1de42c2746a9e88b1938eb12adb638f","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"coreutils"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:gnu:coreutils:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-56391","versionConstraint":">= 9.5, <= 9.11 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:gnu:coreutils:9.11:*:*:*:*:*:*:*"],"package":{"name":"coreutils","version":"9.11-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-56391","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H","metrics":{"baseScore":6.1,"impactScore":4.3,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cvd@cert.pl","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":4.6},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-56391","cwe":"CWE-125","type":"Secondary","source":"cvd@cert.pl"}],"epss":[{"cve":"CVE-2026-56391","date":"2026-10-30","epss":0.00131,"percentile":0.02692}],"risk":0.06779249999999999,"urls":["https://cert.pl/en/posts/2026/07/CVE-2026-56391","https://git.savannah.gnu.org/cgit/coreutils.git/","https://git.savannah.gnu.org/cgit/coreutils.git/commit/?id=d64e35a8a4c0e4608321433e0d84d917e4e36371"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-56391","description":"GNU coreutils uniq is vulnerable to an out‑of‑bounds read due to incorrect handling of multibyte input when the -w (--check-chars) option is used. The find_field() function miscalculates the byte length of characters by repeatedly processing a fixed pointer instead of advancing through the input, resulting in an inflated length value. \nThis incorrect length is later used in a memcmp operation, causing reads beyond the allocated buffer when processing crafted multibyte input.\n\nWhen running GNU coreutils uniq with attacker-provided arguments, this behavior leads to a crash and potential adjacent heap memory exposure.\n\n\nThis issue has been fixed in the commit d64e35a8a4c0e4608321433e0d84d917e4e36371."},"relatedVulnerabilities":[]},{"artifact":{"id":"16361c4de507bb4c","cpes":["cpe:2.3:a:coreutils-env:coreutils-env:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils-env:coreutils_env:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils_env:coreutils-env:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils_env:coreutils_env:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils:coreutils-env:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils:coreutils_env:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:gnu:coreutils-env:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:gnu:coreutils_env:9.11-r0:*:*:*:*:*:*:*"],"name":"coreutils-env","purl":"pkg:apk/alpine/coreutils-env@9.11-r0?arch=x86_64&distro=alpine-3.24.3&upstream=coreutils","type":"apk","version":"9.11-r0","language":"","licenses":["GPL-3.0-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/env"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:6e55090f9f3d41847bdfd6f69c7e7131e1de42c2746a9e88b1938eb12adb638f","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"coreutils"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:gnu:coreutils:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-56391","versionConstraint":">= 9.5, <= 9.11 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:gnu:coreutils:9.11:*:*:*:*:*:*:*"],"package":{"name":"coreutils","version":"9.11-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-56391","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H","metrics":{"baseScore":6.1,"impactScore":4.3,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cvd@cert.pl","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":4.6},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-56391","cwe":"CWE-125","type":"Secondary","source":"cvd@cert.pl"}],"epss":[{"cve":"CVE-2026-56391","date":"2026-10-30","epss":0.00131,"percentile":0.02692}],"risk":0.06779249999999999,"urls":["https://cert.pl/en/posts/2026/07/CVE-2026-56391","https://git.savannah.gnu.org/cgit/coreutils.git/","https://git.savannah.gnu.org/cgit/coreutils.git/commit/?id=d64e35a8a4c0e4608321433e0d84d917e4e36371"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-56391","description":"GNU coreutils uniq is vulnerable to an out‑of‑bounds read due to incorrect handling of multibyte input when the -w (--check-chars) option is used. The find_field() function miscalculates the byte length of characters by repeatedly processing a fixed pointer instead of advancing through the input, resulting in an inflated length value. \nThis incorrect length is later used in a memcmp operation, causing reads beyond the allocated buffer when processing crafted multibyte input.\n\nWhen running GNU coreutils uniq with attacker-provided arguments, this behavior leads to a crash and potential adjacent heap memory exposure.\n\n\nThis issue has been fixed in the commit d64e35a8a4c0e4608321433e0d84d917e4e36371."},"relatedVulnerabilities":[]},{"artifact":{"id":"0c43a637992609b6","cpes":["cpe:2.3:a:coreutils-fmt:coreutils-fmt:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils-fmt:coreutils_fmt:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils_fmt:coreutils-fmt:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils_fmt:coreutils_fmt:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils:coreutils-fmt:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils:coreutils_fmt:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:gnu:coreutils-fmt:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:gnu:coreutils_fmt:9.11-r0:*:*:*:*:*:*:*"],"name":"coreutils-fmt","purl":"pkg:apk/alpine/coreutils-fmt@9.11-r0?arch=x86_64&distro=alpine-3.24.3&upstream=coreutils","type":"apk","version":"9.11-r0","language":"","licenses":["GPL-3.0-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/fmt"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:6e55090f9f3d41847bdfd6f69c7e7131e1de42c2746a9e88b1938eb12adb638f","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"coreutils"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:gnu:coreutils:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-56391","versionConstraint":">= 9.5, <= 9.11 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:gnu:coreutils:9.11:*:*:*:*:*:*:*"],"package":{"name":"coreutils","version":"9.11-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-56391","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H","metrics":{"baseScore":6.1,"impactScore":4.3,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cvd@cert.pl","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":4.6},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-56391","cwe":"CWE-125","type":"Secondary","source":"cvd@cert.pl"}],"epss":[{"cve":"CVE-2026-56391","date":"2026-10-30","epss":0.00131,"percentile":0.02692}],"risk":0.06779249999999999,"urls":["https://cert.pl/en/posts/2026/07/CVE-2026-56391","https://git.savannah.gnu.org/cgit/coreutils.git/","https://git.savannah.gnu.org/cgit/coreutils.git/commit/?id=d64e35a8a4c0e4608321433e0d84d917e4e36371"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-56391","description":"GNU coreutils uniq is vulnerable to an out‑of‑bounds read due to incorrect handling of multibyte input when the -w (--check-chars) option is used. The find_field() function miscalculates the byte length of characters by repeatedly processing a fixed pointer instead of advancing through the input, resulting in an inflated length value. \nThis incorrect length is later used in a memcmp operation, causing reads beyond the allocated buffer when processing crafted multibyte input.\n\nWhen running GNU coreutils uniq with attacker-provided arguments, this behavior leads to a crash and potential adjacent heap memory exposure.\n\n\nThis issue has been fixed in the commit d64e35a8a4c0e4608321433e0d84d917e4e36371."},"relatedVulnerabilities":[]},{"artifact":{"id":"157238390cea3b89","cpes":["cpe:2.3:a:coreutils-sha512sum:coreutils-sha512sum:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils-sha512sum:coreutils_sha512sum:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils_sha512sum:coreutils-sha512sum:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils_sha512sum:coreutils_sha512sum:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils:coreutils-sha512sum:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:coreutils:coreutils_sha512sum:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:gnu:coreutils-sha512sum:9.11-r0:*:*:*:*:*:*:*","cpe:2.3:a:gnu:coreutils_sha512sum:9.11-r0:*:*:*:*:*:*:*"],"name":"coreutils-sha512sum","purl":"pkg:apk/alpine/coreutils-sha512sum@9.11-r0?arch=x86_64&distro=alpine-3.24.3&upstream=coreutils","type":"apk","version":"9.11-r0","language":"","licenses":["GPL-3.0-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/sha512sum"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:6e55090f9f3d41847bdfd6f69c7e7131e1de42c2746a9e88b1938eb12adb638f","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"coreutils"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:gnu:coreutils:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-56391","versionConstraint":">= 9.5, <= 9.11 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:gnu:coreutils:9.11:*:*:*:*:*:*:*"],"package":{"name":"coreutils","version":"9.11-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-56391","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H","metrics":{"baseScore":6.1,"impactScore":4.3,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cvd@cert.pl","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":4.6},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-56391","cwe":"CWE-125","type":"Secondary","source":"cvd@cert.pl"}],"epss":[{"cve":"CVE-2026-56391","date":"2026-10-30","epss":0.00131,"percentile":0.02692}],"risk":0.06779249999999999,"urls":["https://cert.pl/en/posts/2026/07/CVE-2026-56391","https://git.savannah.gnu.org/cgit/coreutils.git/","https://git.savannah.gnu.org/cgit/coreutils.git/commit/?id=d64e35a8a4c0e4608321433e0d84d917e4e36371"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-56391","description":"GNU coreutils uniq is vulnerable to an out‑of‑bounds read due to incorrect handling of multibyte input when the -w (--check-chars) option is used. The find_field() function miscalculates the byte length of characters by repeatedly processing a fixed pointer instead of advancing through the input, resulting in an inflated length value. \nThis incorrect length is later used in a memcmp operation, causing reads beyond the allocated buffer when processing crafted multibyte input.\n\nWhen running GNU coreutils uniq with attacker-provided arguments, this behavior leads to a crash and potential adjacent heap memory exposure.\n\n\nThis issue has been fixed in the commit d64e35a8a4c0e4608321433e0d84d917e4e36371."},"relatedVulnerabilities":[]},{"artifact":{"id":"56144b5ac3e92bcb","cpes":["cpe:2.3:a:binutils:binutils:2.45.1-r1:*:*:*:*:*:*:*","cpe:2.3:a:gnu:binutils:2.45.1-r1:*:*:*:*:*:*:*"],"name":"binutils","purl":"pkg:apk/alpine/binutils@2.45.1-r1?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"2.45.1-r1","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later AND BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/addr2line"},{"path":"/usr/bin/ar"},{"path":"/usr/bin/as"},{"path":"/usr/bin/c++filt"},{"path":"/usr/bin/dwp"},{"path":"/usr/bin/elfedit"},{"path":"/usr/bin/gprof"},{"path":"/usr/bin/ld"},{"path":"/usr/bin/ld.bfd"},{"path":"/usr/bin/nm"},{"path":"/usr/bin/objcopy"},{"path":"/usr/bin/objdump"},{"path":"/usr/bin/ranlib"},{"path":"/usr/bin/readelf"},{"path":"/usr/bin/size"},{"path":"/usr/bin/strings"},{"path":"/usr/bin/strip"},{"path":"/usr/lib"},{"path":"/usr/lib/libbfd-2.45.1.so"},{"path":"/usr/lib/libctf-nobfd.so.0"},{"path":"/usr/lib/libctf-nobfd.so.0.0.0"},{"path":"/usr/lib/libctf.so.0"},{"path":"/usr/lib/libctf.so.0.0.0"},{"path":"/usr/lib/libopcodes-2.45.1.so"},{"path":"/usr/lib/libsframe.so.2"},{"path":"/usr/lib/libsframe.so.2.0.0"},{"path":"/usr/lib/bfd-plugins"},{"path":"/usr/lib/bfd-plugins/libdep.so"},{"path":"/usr/x86_64-alpine-linux-musl"},{"path":"/usr/x86_64-alpine-linux-musl/bin"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ar"},{"path":"/usr/x86_64-alpine-linux-musl/bin/as"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ld"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ld.bfd"},{"path":"/usr/x86_64-alpine-linux-musl/bin/nm"},{"path":"/usr/x86_64-alpine-linux-musl/bin/objcopy"},{"path":"/usr/x86_64-alpine-linux-musl/bin/objdump"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ranlib"},{"path":"/usr/x86_64-alpine-linux-musl/bin/readelf"},{"path":"/usr/x86_64-alpine-linux-musl/bin/strip"},{"path":"/usr/x86_64-alpine-linux-musl/lib"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xa"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xa"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/stamp"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:6e55090f9f3d41847bdfd6f69c7e7131e1de42c2746a9e88b1938eb12adb638f","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"binutils"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:gnu:binutils:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2025-69644","versionConstraint":"< 2.46 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:gnu:binutils:2.45.1:*:*:*:*:*:*:*"],"package":{"name":"binutils","version":"2.45.1-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2025-69644","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5,"impactScore":3.6,"exploitabilityScore":1.4},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-69644","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-69644","date":"2026-10-30","epss":0.00131,"percentile":0.0269}],"risk":0.0655,"urls":["https://sourceware.org/bugzilla/show_bug.cgi?id=33639","https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=455446bbdc8675f34808187de2bbad4682016ff7"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-69644","description":"An issue was discovered in Binutils before 2.46. The objdump contains a denial-of-service vulnerability when processing a crafted binary with malformed debug information. A logic flaw in the handling of DWARF location list headers can cause objdump to enter an unbounded loop and produce endless output until manually interrupted. This issue affects versions prior to the upstream fix and allows a local attacker to cause excessive resource consumption by supplying a malicious input file."},"relatedVulnerabilities":[]},{"artifact":{"id":"56144b5ac3e92bcb","cpes":["cpe:2.3:a:binutils:binutils:2.45.1-r1:*:*:*:*:*:*:*","cpe:2.3:a:gnu:binutils:2.45.1-r1:*:*:*:*:*:*:*"],"name":"binutils","purl":"pkg:apk/alpine/binutils@2.45.1-r1?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"2.45.1-r1","language":"","licenses":["GPL-2.0-or-later AND LGPL-2.1-or-later AND BSD-3-Clause"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/addr2line"},{"path":"/usr/bin/ar"},{"path":"/usr/bin/as"},{"path":"/usr/bin/c++filt"},{"path":"/usr/bin/dwp"},{"path":"/usr/bin/elfedit"},{"path":"/usr/bin/gprof"},{"path":"/usr/bin/ld"},{"path":"/usr/bin/ld.bfd"},{"path":"/usr/bin/nm"},{"path":"/usr/bin/objcopy"},{"path":"/usr/bin/objdump"},{"path":"/usr/bin/ranlib"},{"path":"/usr/bin/readelf"},{"path":"/usr/bin/size"},{"path":"/usr/bin/strings"},{"path":"/usr/bin/strip"},{"path":"/usr/lib"},{"path":"/usr/lib/libbfd-2.45.1.so"},{"path":"/usr/lib/libctf-nobfd.so.0"},{"path":"/usr/lib/libctf-nobfd.so.0.0.0"},{"path":"/usr/lib/libctf.so.0"},{"path":"/usr/lib/libctf.so.0.0.0"},{"path":"/usr/lib/libopcodes-2.45.1.so"},{"path":"/usr/lib/libsframe.so.2"},{"path":"/usr/lib/libsframe.so.2.0.0"},{"path":"/usr/lib/bfd-plugins"},{"path":"/usr/lib/bfd-plugins/libdep.so"},{"path":"/usr/x86_64-alpine-linux-musl"},{"path":"/usr/x86_64-alpine-linux-musl/bin"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ar"},{"path":"/usr/x86_64-alpine-linux-musl/bin/as"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ld"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ld.bfd"},{"path":"/usr/x86_64-alpine-linux-musl/bin/nm"},{"path":"/usr/x86_64-alpine-linux-musl/bin/objcopy"},{"path":"/usr/x86_64-alpine-linux-musl/bin/objdump"},{"path":"/usr/x86_64-alpine-linux-musl/bin/ranlib"},{"path":"/usr/x86_64-alpine-linux-musl/bin/readelf"},{"path":"/usr/x86_64-alpine-linux-musl/bin/strip"},{"path":"/usr/x86_64-alpine-linux-musl/lib"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf32_x86_64.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_i386.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_iamcu.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xd"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdcer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xde"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xder"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xdwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xs"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xsc"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xsce"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xscer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xse"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xser"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xsw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xswe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xswer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xw"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xwe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/elf_x86_64.xwer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xa"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pe.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.x"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xa"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xbn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xe"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xer"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xn"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xr"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/i386pep.xu"},{"path":"/usr/x86_64-alpine-linux-musl/lib/ldscripts/stamp"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:6e55090f9f3d41847bdfd6f69c7e7131e1de42c2746a9e88b1938eb12adb638f","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"binutils"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:gnu:binutils:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-6844","versionConstraint":"none (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:gnu:binutils:2.45.1:*:*:*:*:*:*:*"],"package":{"name":"binutils","version":"2.45.1-r1"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-6844","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-6844","cwe":"CWE-400","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-6844","date":"2026-10-30","epss":0.00104,"percentile":0.01009}],"risk":0.054599999999999996,"urls":["https://access.redhat.com/security/cve/CVE-2026-6844","https://bugzilla.redhat.com/show_bug.cgi?id=2460016"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-6844","description":"A flaw was found in the `readelf` utility of the binutils package. A local attacker could exploit two Denial of Service (DoS) vulnerabilities by providing a specially crafted Executable and Linkable Format (ELF) file. One vulnerability, a resource exhaustion (CWE-400), can lead to an out-of-memory condition. The other, a null pointer dereference (CWE-476), can cause a segmentation fault. Both issues can result in the `readelf` utility becoming unresponsive or crashing, leading to a denial of service."},"relatedVulnerabilities":[]}],"grade":"B","score":"70.00","as_of":"2026-10-31T09:02:36.027Z","grype_db_version":"2026-10-31T06:18:17.000Z"}