The binutils `readelf` utility can be misused by a local attacker who supplies a carefully crafted ELF file. One weakness causes an out‑of‑memory condition, while the other leads to a null‑pointer dereference and a segmentation fault. Either path can crash or hang the utility, resulting in a denial of service for any process that relies on `readelf`.

The vulnerability affects Red Hat Enterprise Linux 7, 8, 9, 10, the Red Hat Hardened Images, and the Red Hat OpenShift Container Platform 4. The binutils package is the impacted component. Specific release or patch information is not listed, so any existing installations that have not yet applied an update could be susceptible.

The CVSS score of 5.5 places this flaw in the medium severity range, and the EPSS score is currently unavailable. It is not in the CISA KEV catalog. Because the vulnerability requires the attacker to have local access to a system and to supply a malicious ELF file, the threat is confined to local exploitation. However, the denial of service can disrupt services or routine system administration that uses `readelf`, potentially impacting availability of dependent tools or scripts.