CVE-2026-110659 — ELFIO through 3.12 NULL Pointer Dereference via relocation_section_accessor get_entry
ELFIO through 3.12 contains a NULL pointer dereference vulnerability in relocation_section_accessor get_entry() that allows attackers to crash applications via an unvalidated sh…
Published: 2026-10-14 · CVSS: 6.8 · CVSS 4.0
ELFIO through 3.12 contains a NULL pointer dereference vulnerability in relocation_section_accessor get_entry() that allows attackers to crash applications via an unvalidated sh_link index. Attackers can supply a crafted ELF file whose SHT_REL or SHT_RELA section has a dangling sh_link, causing find_hash_section() to dereference null and deny service.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7