CVE-2025-11412
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2025-11412
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-11412.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2025-11412
- Downstream
- Published
- 2025-10-07T22:15:34Z
- Modified
- 2025-10-22T08:02:35.871190Z
- Severity
-
- 5.5 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
- Summary
- [none]
- Details
-
A vulnerability has been found in GNU Binutils 2.45. This impacts the function bfdelfgcrecordvtentry of the file bfd/elflink.c of the component Linker. The manipulation leads to out-of-bounds read. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. The identifier of the patch is 047435dd988a3975d40c6626a8f739a0b2e154bc. To fix this issue, it is recommended to deploy a patch.
- References
-
- https://vuldb.com/?ctiid.327348
- https://vuldb.com/?id.327348
- https://www.gnu.org/
- https://sourceware.org/bugzilla/show_bug.cgi?id=33452
- https://sourceware.org/bugzilla/show_bug.cgi?id=33452#c8
- https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=047435dd988a3975d40c6626a8f739a0b2e154bc
- https://sourceware.org/bugzilla/attachment.cgi?id=16378
Affected packages
Git / sourceware.org/git/binutils-gdb.git
Affected ranges
- Type
- GIT
- Repo
- https://sourceware.org/git/binutils-gdb.git
- Events
-
Introduced0 Unknown introduced commit / All previous commits are affectedLast affected2bc7af1ff7732451b6a7b09462a815c3284f9613
Affected versions
Other
binu_ss_19990502
binutils-2_41-release
binutils-2_45
gdb-10-branchpoint
gdb-11-branchpoint
gdb-12-branchpoint
gdb-13-branchpoint
gdb-14-branchpoint
gdb-15-branchpoint
gdb-16-branchpoint
gdb-4_18-branchpoint
gdb-9-branchpoint
gdb_5_2-branchpoint
gdb_5_3-branchpoint
gdb_6_0-branchpoint
gdb_6_1-branchpoint
gdb_6_2-branchpoint
gdb_6_3-branchpoint
gdb_6_4-branchpoint
gdb_6_5-branchpoint
gdb_6_6-branchpoint
gdb_6_7-branchpoint
gdb_6_8-branchpoint
gdb_7_0-branchpoint
gdb_7_1-branchpoint
gdb_7_2-branchpoint
gdb_7_3-branchpoint
gdb_7_4-branchpoint
gdb_7_5-branchpoint
gdb_7_6-branchpoint
readline_4_0
users/ARM/embedded-binutils-master-2016q4
users/ARM/embedded-binutils-master-2017q4
users/ARM/embedded-binutils-master-2018q4
users/ARM/embedded-gdb-master-2017q4
users/ARM/embedded-gdb-master-2018q4
gdb-7.*
gdb-7.10-branchpoint
gdb-7.11-branchpoint
gdb-7.12-branchpoint
gdb-7.7-branchpoint
gdb-7.8-branchpoint
gdb-7.9-branchpoint
gdb-8.*
gdb-8.0-branchpoint
gdb-8.1-branchpoint
gdb-8.2-branchpoint
gdb-8.3-branchpoint