Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2019-9076

16
FAUCET Score

CVE-2019-9076 is a vulnerability in the GNU Binutils BFD library (libbfd) that affects GNU Binutils and NetApp Element Software Management. It involves an attempted excessive memory allocation within the elf_read_notes function, categorized as CWE-770. This vulnerability has a CVSS score of 5.5 (Medium), indicating a local attack vector with low complexity, requiring user interaction, and potentially leading to high availability impact. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.

Impacted Technologies

VendorProductVersion(s)CPE
2.32CPE matchmatch criteria
cpe:2.3:a:gnu:binutils:2.32:*:*:*:*:*:*:*
All Versions ImpactedCPE matchmatch criteria
cpe:2.3:a:netapp:element_software_management:*:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.1

5.5MEDIUM

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
Exploitability Score
1.8
Impact Score
3.6
CvssVersion
3.1

Exploit Intelligence

EPSS Score
1.23%
Probability of exploitation in next 30 days
EPSS Percentile
65.8%
Percentile rank of EPSS score among Peer Group
As of 2026-07-26
Model: v2026.06.15
This CVE's current EPSS score of 0.0123 is in the 76th percentile among its peer group of 5,758 CVEs.

Social Chatter

No social media mentions found for this CVE.

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (4)

microsoftpatch availablevia msrc
Product: 17006-16820Fixed in: 2.32-4
microsoftpatch availablevia msrc
Product: cm1 binutils 2.32-4 on CBL Mariner 1.0Fixed in: 2.32-4
microsoftpatch availablevia msrc
Product: CBL Mariner 1.0 x64Fixed in: 2.32-4
microsoftpatch availablevia msrc
Product: CBL Mariner 1.0 ARMFixed in: 2.32-4

Vendor Advisories (3)

microsoft2020-Aug/CVE-2019-9076

CVE-2019-9076

Aug 11, 2020
redhatCVE-2019-9076

binutils: excessive memory allocation in function elf_read_notes in elf.c

Feb 19, 2019
microsoft2019-Feb/CVE-2019-9076Moderate

An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd) as distributed in GNU Binutils 2.32. It is an attempted excessive memory allocation in elf_read_notes in elf.c.

Feb 12, 2019

References

security.gentoo.org / glsa/202107-24
Third Party Advisory
security.netapp.com / advisory/ntap-20190314-0003
PatchThird Party Advisory
sourceware.org / bugzilla/show_bug.cgi
ExploitIssue TrackingThird Party Advisory
support.f5.com / csp/article/K44650639
Third Party Advisory