CVE-2026-6845

CVE-2026-6845 is a Denial of Service vulnerability in the binutils readelf utility that allows a local attacker to crash the application or consume excessive system resources by processing a specially crafted ELF file. The flaw affects binutils and requires user interaction, as an attacker must trick a user into opening a malicious file. This vulnerability has a CVSS score of 5.0 (Medium severity) with a local attack vector and low complexity. The attack requires low privileges and user interaction to execute, but the impact is limited to availability—the system may become unresponsive or the affected program may crash. No confidentiality or integrity impacts are possible. The EPSS score of 0.000050 indicates this vulnerability is in the lower percentile for exploitation likelihood compared to other CVEs. There is no evidence of active exploitation or community attention surrounding this vulnerability. It does not appear on the Known Exploited Vulnerabilities (KEV) catalog and remains inactive on threat intelligence watch lists. No public exploit code has been identified, suggesting this remains a low-priority threat for most organizations at this time.