CVE-2009-3736: ltdl.c in libltdl in GNU Libtool 1.5.x, and 2.2.6 before 2.2.6b, as used in Ham Radio Control Libraries, Q,...

Security readout for executives and security teams

CVE-2009-3736 is an old local privilege-escalation issue in GNU Libtool’s libltdl. A privileged program using vulnerable libltdl could be tricked into loading a malicious .la file from its current working directory. This requires local access and a suitable privileged execution path; it is not described as remotely exploitable. Exposure is most likely on legacy Unix/Linux systems or products bundling vulnerable libltdl. The CVE mentions Ham Radio Control Libraries and possibly other products, but the provided data does not give a complete affected-product list. Treat as legacy hygiene unless affected privileged software is present. Prioritize remediation on multi-user systems, administrative workstations, and appliances running old bundled libraries. Business urgency rises if untrusted local users can access the host. Mitigation focus: Inventory systems for GNU Libtool/libltdl 1.5.x and 2.2.6 before 2.2.6b.; Apply relevant vendor updates from Linux distribution or product advisories.; For bundled libltdl, check the application vendor’s guidance and rebuild/update if directed..

Prepared

Jun 28, 2026, 14:13 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.