CVE-2025-11839
published 2025-10-16CVE-2025-11839: A security flaw has been discovered in GNU Binutils 2.45. Impacted is the function tg_tag_type of the file prdbg.c. Performing a manipulation results in…
PriorityP425medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.26%
17.2th percentile
A security flaw has been discovered in GNU Binutils 2.45. Impacted is the function tg_tag_type of the file prdbg.c. Performing a manipulation results in unchecked return value. The attack needs to be approached locally. The exploit has been released to the public and may be used for attacks.
Affected
15 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | binutils | < binutils 2.46-1 (forky) | binutils 2.46-1 (forky) |
| gnu | binutils | — | — |
| gnu | binutils | >= 0 < 2.46-1 | 2.46-1 |
| gnu | binutils | >= 0 < 2.38-4ubuntu2.11 | 2.38-4ubuntu2.11 |
| gnu | binutils | >= 0 < 2.42-4ubuntu2.7 | 2.42-4ubuntu2.7 |
| gnu | binutils | >= 0 < 2.45-7ubuntu1.1 | 2.45-7ubuntu1.1 |
| gnu | binutils | >= 0 < 2.24-5ubuntu14.2+esm7 | 2.24-5ubuntu14.2+esm7 |
| gnu | binutils | >= 0 < 2.26.1-1ubuntu1~16.04.8+esm13 | 2.26.1-1ubuntu1~16.04.8+esm13 |
| gnu | binutils | >= 0 < 2.30-21ubuntu1~18.04.9+esm5 | 2.30-21ubuntu1~18.04.9+esm5 |
| gnu | binutils | >= 0 < 2.34-6ubuntu1.11+esm1 | 2.34-6ubuntu1.11+esm1 |
| msrc | azl3_binutils_2.41-10_on_azure_linux_3.0 | — | — |
| msrc | azl3_binutils_2.41-9_on_azure_linux_3.0 | — | — |
| msrc | cbl2_binutils_2.37-17_on_cbl_mariner_2.0 | — | — |
| msrc | cbl2_binutils_2.37-19_on_cbl_mariner_2.0 | — | — |
| msrc | cbl2_binutils_2.37-20_on_cbl_mariner_2.0 | — | — |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
nvdv4.01.9LOWCVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
nvdv2.01.7LOWAV:L/AC:L/Au:S/C:N/I:N/A:P
osv4.8MEDIUM
vendor_debian4.8LOW
vendor_redhat4.8MEDIUM
vendor_msrc3.3LOW
vendor_ubuntu3.1LOW
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
binutils vulnerabilities
osv·2025-12-01·CVSS 2.3
CVE-2025-11839 [LOW] binutils vulnerabilities
binutils vulnerabilities
It was discovered that GNU binutils could be forced to perform an out-
of-bounds read in certain instances. An attacker with local access to
a system could possibly use this issue to cause a denial of service.
(CVE-2025-11839, CVE-2025-11840)
It was discovered that GNU binutils incorrectly handled certain inputs.
An attacker could possibly use this issue to cause a denial of service.
This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04
LTS, and Ubuntu 20.04 LTS. (CVE-2025-8225)
It was discovered that GNU binutils incorrectly handled certain inputs.
An attacker could possibly use this issue to cause a crash or
execute arbitrary code. This issue only affected Ubuntu 14.04 LTS,
Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS.
(CVE-2025
GHSA
GHSA-6fvj-8p6j-8wxg: A security flaw has been discovered in GNU Binutils 2
ghsa_unreviewed·2025-10-16
CVE-2025-11839 [MEDIUM] CWE-252 GHSA-6fvj-8p6j-8wxg: A security flaw has been discovered in GNU Binutils 2
A security flaw has been discovered in GNU Binutils 2.45. Impacted is the function tg_tag_type of the file prdbg.c. Performing manipulation results in unchecked return value. The attack needs to be approached locally. The exploit has been released to the public and may be exploited.
OSV
CVE-2025-11839: A security flaw has been discovered in GNU Binutils 2
osv·2025-10-16·CVSS 4.8
CVE-2025-11839 [MEDIUM] CVE-2025-11839: A security flaw has been discovered in GNU Binutils 2
A security flaw has been discovered in GNU Binutils 2.45. Impacted is the function tg_tag_type of the file prdbg.c. Performing a manipulation results in unchecked return value. The attack needs to be approached locally. The exploit has been released to the public and may be used for attacks.
Ubuntu
GNU binutils vulnerabilities
vendor_ubuntu·2025-12-01·CVSS 3.1
CVE-2025-3198 [LOW] GNU binutils vulnerabilities
Title: GNU binutils vulnerabilities
Summary: Several security issues were fixed in GNU binutils.
It was discovered that GNU binutils could be forced to perform an out-
of-bounds read in certain instances. An attacker with local access to
a system could possibly use this issue to cause a denial of service.
(CVE-2025-11839, CVE-2025-11840)
It was discovered that GNU binutils incorrectly handled certain inputs.
An attacker could possibly use this issue to cause a denial of service.
This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04
LTS, and Ubuntu 20.04 LTS. (CVE-2025-8225)
It was discovered that GNU binutils incorrectly handled certain inputs.
An attacker could possibly use this issue to cause a crash or
execute arbitrary code. This issue only affected Ubuntu 14.04
Red Hat
binutils: GNU Binutils prdbg.c tg_tag_type return value
vendor_redhat·2025-10-16·CVSS 4.8
CVE-2025-11839 [MEDIUM] CWE-252 binutils: GNU Binutils prdbg.c tg_tag_type return value
binutils: GNU Binutils prdbg.c tg_tag_type return value
A security flaw has been discovered in GNU Binutils 2.45. Impacted is the function tg_tag_type of the file prdbg.c. Performing a manipulation results in unchecked return value. The attack needs to be approached locally. The exploit has been released to the public and may be used for attacks.
An uncheck return value flaw has been discovered in the GNU binutils program. This flaw exists in the `tg_tag_type` function of the file prdbg.c and exploitation of this flaw may lead to a program crash.
Statement: Red Hat rates this vulnerability as Low as a result of how the GNU Binutils are configured to be used in Red Hat products. When running with default configurations the affected program will have limited privileges and thus the availa
Microsoft
GNU Binutils prdbg.c tg_tag_type return value
vendor_msrc·2025-10-14·CVSS 3.3
CVE-2025-11839 [MEDIUM] CWE-252 GNU Binutils prdbg.c tg_tag_type return value
GNU Binutils prdbg.c tg_tag_type return value
FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?
One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See this blog post for more information. If impact to additional products is identified, we will update the CVE to reflect this.
Mariner: Mariner
VulDB: VulDB
Customer Action Required: Yes
Remediation: CBL-Mariner Releases
Reference: https://learn.microsoft
Debian
CVE-2025-11839: binutils - A security flaw has been discovered in GNU Binutils 2.45. Impacted is the functi...
vendor_debian·2025·CVSS 4.8
CVE-2025-11839 [MEDIUM] CVE-2025-11839: binutils - A security flaw has been discovered in GNU Binutils 2.45. Impacted is the functi...
A security flaw has been discovered in GNU Binutils 2.45. Impacted is the function tg_tag_type of the file prdbg.c. Performing a manipulation results in unchecked return value. The attack needs to be approached locally. The exploit has been released to the public and may be used for attacks.
Scope: local
bookworm: open
bullseye: open
forky: resolved (fixed in 2.46-1)
sid: resolved (fixed in 2.46-1)
trixie: open
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2025-11839 rizin: GNU Binutils prdbg.c tg_tag_type return value [fedora-42]
bugzilla·2025-10-16·CVSS 1.9
CVE-2025-11839 [LOW] CVE-2025-11839 rizin: GNU Binutils prdbg.c tg_tag_type return value [fedora-42]
CVE-2025-11839 rizin: GNU Binutils prdbg.c tg_tag_type return value [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
The following link provides references to all essential vulnerability management information. If something is wrong or missing, please contact a member of PSIRT.
https://spaces.redhat.com/display/PRODSEC/Vulnerability+Management+-+Essential+Documents+for+Engineering+Teams
Discussion:
This message is a reminder that Fedora Linux 42 is nearing its end of life.
Fedora will stop maintaining and issuing updates for Fedora Linux 42 on 2026-05-13.
It is Fedora's policy to close all bug reports
Bugzilla
CVE-2025-11839 mingw-binutils: GNU Binutils prdbg.c tg_tag_type return value [fedora-42]
bugzilla·2025-10-16·CVSS 4.8
CVE-2025-11839 [MEDIUM] CVE-2025-11839 mingw-binutils: GNU Binutils prdbg.c tg_tag_type return value [fedora-42]
CVE-2025-11839 mingw-binutils: GNU Binutils prdbg.c tg_tag_type return value [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
The following link provides references to all essential vulnerability management information. If something is wrong or missing, please contact a member of PSIRT.
https://spaces.redhat.com/display/PRODSEC/Vulnerability+Management+-+Essential+Documents+for+Engineering+Teams
Discussion:
FEDORA-2026-9174e6ea37 (mingw-binutils-2.45.1-2.fc43) has been submitted as an update to Fedora 43.
https://bodhi.fedoraproject.org/updates/FEDORA-2026-9174e6ea37
---
FEDORA-2026-fe96f3532b (mingw
Bugzilla
CVE-2025-11839 radare2: GNU Binutils prdbg.c tg_tag_type return value [fedora-42]
bugzilla·2025-10-16·CVSS 1.9
CVE-2025-11839 [LOW] CVE-2025-11839 radare2: GNU Binutils prdbg.c tg_tag_type return value [fedora-42]
CVE-2025-11839 radare2: GNU Binutils prdbg.c tg_tag_type return value [fedora-42]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
The following link provides references to all essential vulnerability management information. If something is wrong or missing, please contact a member of PSIRT.
https://spaces.redhat.com/display/PRODSEC/Vulnerability+Management+-+Essential+Documents+for+Engineering+Teams
Discussion:
This message is a reminder that Fedora Linux 42 is nearing its end of life.
Fedora will stop maintaining and issuing updates for Fedora Linux 42 on 2026-05-13.
It is Fedora's policy to close all bug report
Bugzilla
CVE-2025-11839 binutils: GNU Binutils prdbg.c tg_tag_type return value
bugzilla·2025-10-16·CVSS 4.8
CVE-2025-11839 [MEDIUM] CVE-2025-11839 binutils: GNU Binutils prdbg.c tg_tag_type return value
CVE-2025-11839 binutils: GNU Binutils prdbg.c tg_tag_type return value
A security flaw has been discovered in GNU Binutils 2.45. Impacted is the function tg_tag_type of the file prdbg.c. Performing manipulation results in unchecked return value. The attack needs to be approached locally. The exploit has been released to the public and may be exploited.
https://sourceware.org/bugzilla/attachment.cgi?id=16344https://sourceware.org/bugzilla/show_bug.cgi?id=33448https://vuldb.com/?ctiid.328774https://vuldb.com/?id.328774https://vuldb.com/?submit.661279https://www.gnu.org/https://cert-portal.siemens.com/productcert/html/ssa-082556.htmlhttps://sourceware.org/bugzilla/show_bug.cgi?id=33448
2025-10-16
Published