CVE-2025-11494
published 2025-10-08CVE-2025-11494: A vulnerability was found in GNU Binutils 2.45. Impacted is the function _bfd_x86_elf_late_size_sections of the file bfd/elfxx-x86.c of the component Linker…
PriorityP423medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.20%
9.9th percentile
A vulnerability was found in GNU Binutils 2.45. Impacted is the function _bfd_x86_elf_late_size_sections of the file bfd/elfxx-x86.c of the component Linker. The manipulation results in out-of-bounds read. The attack needs to be approached locally. The exploit has been made public and could be used. The patch is identified as b6ac5a8a5b82f0ae6a4642c8d7149b325f4cc60a. A patch should be applied to remediate this issue.
Affected
18 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | binutils | < binutils 2.46-1 (forky) | binutils 2.46-1 (forky) |
| gnu | binutils | — | — |
| gnu | binutils | >= 0 < 2.46-1 | 2.46-1 |
| gnu | binutils | >= 0 < 2.38-4ubuntu2.12 | 2.38-4ubuntu2.12 |
| gnu | binutils | >= 0 < 2.42-4ubuntu2.8 | 2.42-4ubuntu2.8 |
| gnu | binutils | >= 0 < 2.45-7ubuntu1.2 | 2.45-7ubuntu1.2 |
| gnu | binutils | >= 0 < 2.24-5ubuntu14.2+esm8 | 2.24-5ubuntu14.2+esm8 |
| gnu | binutils | >= 0 < 2.26.1-1ubuntu1~16.04.8+esm14 | 2.26.1-1ubuntu1~16.04.8+esm14 |
| gnu | binutils | >= 0 < 2.30-21ubuntu1~18.04.9+esm13 | 2.30-21ubuntu1~18.04.9+esm13 |
| gnu | binutils | >= 0 < 2.34-6ubuntu1.11+esm2 | 2.34-6ubuntu1.11+esm2 |
| msrc | azl3_binutils_2.41-10_on_azure_linux_3.0 | — | — |
| msrc | azl3_crash_8.0.4-5_on_azure_linux_3.0 | — | — |
| msrc | cbl2_binutils_2.37-19_on_cbl_mariner_2.0 | — | — |
| msrc | cbl2_crash_8.0.1-5_on_cbl_mariner_2.0 | — | — |
| msrc | cbl2_gdb_11.2-10_on_cbl_mariner_2.0 | — | — |
| msrc | cbl_mariner_1.0_arm | — | — |
| msrc | cbl_mariner_1.0_x64 | — | — |
| msrc | cm1_kernel_5.4.91-11_on_cbl_mariner_1.0 | — | — |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
nvdv4.01.9LOWCVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
nvdv2.01.7LOWAV:L/AC:L/Au:S/C:N/I:N/A:P
osv4.8MEDIUM
vendor_debian4.8LOW
vendor_redhat4.8MEDIUM
vendor_msrc4.4MEDIUM
vendor_ubuntu3.3LOW
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
binutils vulnerabilities
osv·2025-12-10·CVSS 4.8
CVE-2025-11081 [MEDIUM] binutils vulnerabilities
binutils vulnerabilities
It was discovered that GNU binutils' dump_dwarf_section function could be
manipulated to perform an out-of-bounds read. A local attacker could
possibly use this issue to cause GNU binutils to crash, resulting in a
denial of service. This issue only affected Ubuntu 25.10. (CVE-2025-11081)
It was discovered that GNU binutils incorrectly handled certain files. A
local attacker could possibly use this issue to cause a crash or execute
arbitrary code. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04
LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 25.10.
(CVE-2025-11082)
It was discovered that GNU binutils incorrectly handled certain inputs. A
local attacker could possibly use this issue to cause a crash or execute
arbitrary code. This issue was only fixed
GHSA
GHSA-g3q3-pmmg-p6p8: A vulnerability was found in GNU Binutils 2
ghsa_unreviewed·2025-10-08
CVE-2025-11494 [MEDIUM] CWE-119 GHSA-g3q3-pmmg-p6p8: A vulnerability was found in GNU Binutils 2
A vulnerability was found in GNU Binutils 2.45. Impacted is the function _bfd_x86_elf_late_size_sections of the file bfd/elfxx-x86.c of the component Linker. The manipulation results in out-of-bounds read. The attack needs to be approached locally. The exploit has been made public and could be used. The patch is identified as b6ac5a8a5b82f0ae6a4642c8d7149b325f4cc60a. A patch should be applied to remediate this issue.
OSV
CVE-2025-11494: A vulnerability was found in GNU Binutils 2
osv·2025-10-08·CVSS 4.8
CVE-2025-11494 [MEDIUM] CVE-2025-11494: A vulnerability was found in GNU Binutils 2
A vulnerability was found in GNU Binutils 2.45. Impacted is the function _bfd_x86_elf_late_size_sections of the file bfd/elfxx-x86.c of the component Linker. The manipulation results in out-of-bounds read. The attack needs to be approached locally. The exploit has been made public and could be used. The patch is identified as b6ac5a8a5b82f0ae6a4642c8d7149b325f4cc60a. A patch should be applied to remediate this issue.
Ubuntu
GNU binutils vulnerabilities
vendor_ubuntu·2025-12-10·CVSS 3.3
CVE-2025-11412 [LOW] GNU binutils vulnerabilities
Title: GNU binutils vulnerabilities
Summary: Several security issues were fixed in GNU binutils.
It was discovered that GNU binutils' dump_dwarf_section function could be
manipulated to perform an out-of-bounds read. A local attacker could
possibly use this issue to cause GNU binutils to crash, resulting in a
denial of service. This issue only affected Ubuntu 25.10. (CVE-2025-11081)
It was discovered that GNU binutils incorrectly handled certain files. A
local attacker could possibly use this issue to cause a crash or execute
arbitrary code. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04
LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 25.10.
(CVE-2025-11082)
It was discovered that GNU binutils incorrectly handled certain inputs. A
local attacker could possibly use this iss
Microsoft
GNU Binutils Linker elfxx-x86.c _bfd_x86_elf_late_size_sections out-of-bounds
vendor_msrc·2025-10-14·CVSS 3.3
CVE-2025-11494 [MEDIUM] CWE-125 GNU Binutils Linker elfxx-x86.c _bfd_x86_elf_late_size_sections out-of-bounds
GNU Binutils Linker elfxx-x86.c _bfd_x86_elf_late_size_sections out-of-bounds
Mariner: Mariner
VulDB: VulDB
Customer Action Required: Yes
Red Hat
binutils: GNU Binutils Linker out-of-bounds read
vendor_redhat·2025-10-08·CVSS 4.8
CVE-2025-11494 [MEDIUM] CWE-125 binutils: GNU Binutils Linker out-of-bounds read
binutils: GNU Binutils Linker out-of-bounds read
A vulnerability was found in GNU Binutils 2.45. Impacted is the function _bfd_x86_elf_late_size_sections of the file bfd/elfxx-x86.c of the component Linker. The manipulation results in out-of-bounds read. The attack needs to be approached locally. The exploit has been made public and could be used. The patch is identified as b6ac5a8a5b82f0ae6a4642c8d7149b325f4cc60a. A patch should be applied to remediate this issue.
An out of bounds read flaw has been discovered in the GNU Binutils package. The impacted function is _bfd_x86_elf_late_size_sections of the file bfd/elfxx-x86.c of the component Linker. The manipulation results in out-of-bounds read. The attack needs to be approached locally.
Statement: Red Hat rates this vulnerability as Low
Debian
CVE-2025-11494: binutils - A vulnerability was found in GNU Binutils 2.45. Impacted is the function _bfd_x8...
vendor_debian·2025·CVSS 4.8
CVE-2025-11494 [MEDIUM] CVE-2025-11494: binutils - A vulnerability was found in GNU Binutils 2.45. Impacted is the function _bfd_x8...
A vulnerability was found in GNU Binutils 2.45. Impacted is the function _bfd_x86_elf_late_size_sections of the file bfd/elfxx-x86.c of the component Linker. The manipulation results in out-of-bounds read. The attack needs to be approached locally. The exploit has been made public and could be used. The patch is identified as b6ac5a8a5b82f0ae6a4642c8d7149b325f4cc60a. A patch should be applied to remediate this issue.
Scope: local
bookworm: open
bullseye: open
forky: resolved (fixed in 2.46-1)
sid: resolved (fixed in 2.46-1)
trixie: open
Microsoft
An issue was discovered in slc_bump in drivers/net/can/slcan.c in the Linux kernel 3.16 through 5.6.2. It allows attackers to read uninitialized can_frame data potentially containing sensitive informa
vendor_msrc·2020-04-14·CVSS 4.4
CVE-2020-11494 [MEDIUM] CWE-908 An issue was discovered in slc_bump in drivers/net/can/slcan.c in the Linux kernel 3.16 through 5.6.2. It allows attackers to read uninitialized can_frame data potentially containing sensitive informa
An issue was discovered in slc_bump in drivers/net/can/slcan.c in the Linux kernel 3.16 through 5.6.2. It allows attackers to read uninitialized can_frame data potentially containing sensitive information from kernel stack memory if the configuration lacks CONFIG_INIT_STACK_ALL aka CID-b9258a2cece4.
FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?
One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See thi
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2025-11494 radare2: GNU Binutils Linker out-of-bounds read [fedora-42]
bugzilla·2025-10-09·CVSS 1.9
CVE-2025-11494 [LOW] CVE-2025-11494 radare2: GNU Binutils Linker out-of-bounds read [fedora-42]
CVE-2025-11494 radare2: GNU Binutils Linker out-of-bounds read [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
The following link provides references to all essential vulnerability management information. If something is wrong or missing, please contact a member of PSIRT.
https://spaces.redhat.com/display/PRODSEC/Vulnerability+Management+-+Essential+Documents+for+Engineering+Teams
Discussion:
This message is a reminder that Fedora Linux 42 is nearing its end of life.
Fedora will stop maintaining and issuing updates for Fedora Linux 42 on 2026-05-13.
It is Fedora's policy to close all bug reports from
Bugzilla
CVE-2025-11494 rizin: GNU Binutils Linker out-of-bounds read [fedora-42]
bugzilla·2025-10-09·CVSS 1.9
CVE-2025-11494 [LOW] CVE-2025-11494 rizin: GNU Binutils Linker out-of-bounds read [fedora-42]
CVE-2025-11494 rizin: GNU Binutils Linker out-of-bounds read [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
The following link provides references to all essential vulnerability management information. If something is wrong or missing, please contact a member of PSIRT.
https://spaces.redhat.com/display/PRODSEC/Vulnerability+Management+-+Essential+Documents+for+Engineering+Teams
Discussion:
This message is a reminder that Fedora Linux 42 is nearing its end of life.
Fedora will stop maintaining and issuing updates for Fedora Linux 42 on 2026-05-13.
It is Fedora's policy to close all bug reports from re
Bugzilla
CVE-2025-11494 binutils: GNU Binutils Linker out-of-bounds read
bugzilla·2025-10-08·CVSS 4.8
CVE-2025-11494 [MEDIUM] CVE-2025-11494 binutils: GNU Binutils Linker out-of-bounds read
CVE-2025-11494 binutils: GNU Binutils Linker out-of-bounds read
A vulnerability was found in GNU Binutils 2.45. Impacted is the function _bfd_x86_elf_late_size_sections of the file bfd/elfxx-x86.c of the component Linker. The manipulation results in out-of-bounds read. The attack needs to be approached locally. The exploit has been made public and could be used. The patch is identified as b6ac5a8a5b82f0ae6a4642c8d7149b325f4cc60a. A patch should be applied to remediate this issue.
https://sourceware.org/bugzilla/attachment.cgi?id=16389https://sourceware.org/bugzilla/show_bug.cgi?id=33499https://sourceware.org/bugzilla/show_bug.cgi?id=33499#c2https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=b6ac5a8a5b82f0ae6a4642c8d7149b325f4cc60ahttps://vuldb.com/?ctiid.327619https://vuldb.com/?id.327619https://vuldb.com/?submit.668281https://www.gnu.org/https://cert-portal.siemens.com/productcert/html/ssa-082556.html
2025-10-08
Published