VDB
CISA-2025-11494
CISA-2025-11494
PUBLISHED
CVSS 4.8 MEDIUM
Reported by VulDB · Published October 8, 2025
A vulnerability was found in GNU Binutils 2.45. Impacted is the function _bfd_x86_elf_late_size_sections of the file bfd/elfxx-x86.c of the component Linker. The manipulation results in out-of-bounds read. The attack needs to be approached locally. The exploit has been made public and could be used. The patch is identified as b6ac5a8a5b82f0ae6a4642c8d7149b325f4cc60a. A patch should be applied to remediate this issue.
Risk Scores
CVSS 4.0
4.8
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| GNU | Binutils | 2.45 |
| GNU | Binutils | 2.45, 2.45 |
Timeline
- Oct 8, 2025 CVE Published
- Feb 24, 2026 CVE Updated
References
- VDB-327619 | GNU Binutils Linker elfxx-x86.c _bfd_x86_elf_late_size_sections out-of-bounds vdb-entrytechnical-description
- VDB-327619 | CTI Indicators (IOB, IOC, IOA) signaturepermissions-required
- Submit #668281 | GNU Binutils 2.45 Out-of-Bounds Read third-party-advisory
- issue-tracking
- issue-tracking
- exploit
- patch
- product