readelf DoS Vulnerability Analysis (CVE-2026-6844)

Vulnerability Overview Vulnerability ID: CVE-2026-6844 Vulnerability Type: Denial of Service (DoS) vulnerability Description: Two denial of service vulnerabilities were discovered in the tool: 1. Resource Exhaustion (CVE-480): A crafted ELF file triggers a memory allocation of 6.37B, leading to an Out of Memory (OOM) error. 2. Null Pointer Dereference (CVE-476): A crafted ELF file triggers , resulting in a SIGSEGV error. Discovery Method: Found via AFL++ fuzzing. PoC Files: Attached to the JSM ticket, not publicly disclosed. Impact Scope Affected Product: tool Affected Versions: 2.46 and earlier versions Remediation Plan Current Status: Vulnerability status is NEW, not yet fixed. Fixed Version: Not specified. Environment: Linux operating system. Priority: medium. Severity: medium. Other Information Report Date: 2026-04-21 08:38 UTC Modified Date: 2026-04-22 08:27 UTC Reporter: OSIDB Bzimport Component: vulnerability Hardware: Not specified Operating System: Linux Target Milestone: Not specified Assigned To: Product Security DevOps Team QA Contact: Not specified Documentation Contact: Not specified URL: Not specified Whiteboard: Not specified Dependencies: 2460505, 2460506, 2460507 Blockers: Not specified TreeView: Depends on / Blocks Attachments Attachment Link: Terms of Use Notes Login is required to comment on or make changes to this vulnerability.

Goal Reached Thanks to every supporter — we hit 100%!

readelf DoS Vulnerability Analysis (CVE-2026-6844)