A null pointer dereference occurs within the function that calculates the offset of an EH frame section in GNU Binutils 2.47. The flaw is triggered by a locally crafted input that, when processed, causes the program to attempt to read through a null reference, leading to a crash or unintended termination of the binary located on the system. The impact is limited to the local environment; an attacker who can place or modify a file that Binutils processes can cause service disruption by forcing the program to fail. The weakness is identified as CWE‑476 and CWE‑404 and the CVSS score of 4.8 reflects a medium severity impact.

GNU Binutils version 2.47 is affected. No additional sub‑versions are listed. Systems that rely on this Binutils release for handling ELF binaries, such as developers or build hosts, may experience crashes when processing maliciously crafted files.

The CVSS score of 4.8 indicates a moderate risk, and the EPSS score of less than 1% suggests that public exploitation is unlikely at this time. The vulnerability is not listed in CISA’s KEV catalog. Because the attack requires local access, it cannot be leveraged remotely, but any user with the ability to supply or modify ELF files processed by Binutils could trigger a denial of service.