CVE-2025-11839

CWE-252 — Unchecked Return ValueCWE-25311 documents9 sources
Severity
4.8MEDIUM
EPSS
0.0%
top 95.78%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
GNU Binutils
Timeline
PublishedOct 16
Latest updateDec 1

Description

A security flaw has been discovered in GNU Binutils 2.45. Impacted is the function tg_tag_type of the file prdbg.c. Performing a manipulation results in unchecked return value. The attack needs to be approached locally. The exploit has been released to the public and may be used for attacks.

CVSS vector

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N

Affected Packages4 packages

▶Debianbinutils< 2.46-1
▶Ubuntubinutils< 2.38-4ubuntu2.11+6
▶CVEListV5gnu/binutils2.45
▶NVDgnu/binutils2.45

🔴Vulnerability Details

4
OSV
binutils vulnerabilities↗2025-12-01
▶
GHSA
GHSA-6fvj-8p6j-8wxg: A security flaw has been discovered in GNU Binutils 2↗2025-10-16
▶
CVEList
GNU Binutils prdbg.c tg_tag_type return value↗2025-10-16
▶
OSV
CVE-2025-11839: A security flaw has been discovered in GNU Binutils 2↗2025-10-16
▶

📋Vendor Advisories

4
Ubuntu
GNU binutils vulnerabilities↗2025-12-01
▶
Red Hat
binutils: GNU Binutils prdbg.c tg_tag_type return value↗2025-10-16
▶
Microsoft
GNU Binutils prdbg.c tg_tag_type return value↗2025-10-14
▶
Debian
CVE-2025-11839: binutils - A security flaw has been discovered in GNU Binutils 2.45. Impacted is the functi...↗2025
▶

💬Community

2
Bugzilla
CVE-2025-11839 mingw-binutils: GNU Binutils prdbg.c tg_tag_type return value [fedora-42]↗2025-10-16
▶
Bugzilla
CVE-2025-11839 binutils: GNU Binutils prdbg.c tg_tag_type return value↗2025-10-16
▶
CVE-2025-11839 (MEDIUM CVSS 4.8) | A security flaw has been discovered | cvebase.io