CVE-2025-11412CWE-119CWE-125

CVE-2025-11412

Low · published October 8, 2025

CVSS v3.1
3.3
EPSS
0%
Percentile
9.8
In the wild
Unconfirmed
What it is

A vulnerability has been found in GNU Binutils 2.45. This impacts the function bfd_elf_gc_record_vtentry of the file bfd/elflink.c of the component Linker. The manipulation leads to out-of-bounds read. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. The identifier of the patch is 047435dd988a3975d40c6626a8f739a0b2e154bc. To fix this issue, it is recommended to deploy a patch.

The record
Technical detail
CVSS v3.1
3.3 · LOW
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.00203 · 9.8th percentile
Weaknesses
CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer; CWE-125 · Out-of-bounds Read
Published
2025-10-08T02:15Z
Affected products (1)
ProductVersionsFixed in
gnu/binutilsall versions—
References (9)
https://sourceware.org/bugzilla/attachment.cgi?id=16378 · [email protected]https://sourceware.org/bugzilla/show_bug.cgi?id=33452 · [email protected]https://sourceware.org/bugzilla/show_bug.cgi?id=33452#c8 · [email protected]https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=047435dd988a3975d40c6626a8f739a0b2e154bc · [email protected]https://vuldb.com/?ctiid.327348 · [email protected]https://vuldb.com/?id.327348 · [email protected]https://www.gnu.org/ · [email protected]https://cert-portal.siemens.com/productcert/html/ssa-082556.html · 0b142b55-0307-4c5a-b3c9-f314f3fb7c5ehttps://sourceware.org/bugzilla/show_bug.cgi?id=33452 · 134c704f-9b21-4f2e-91b3-4a467353bcc0
EPSS history
Timeline
  • 07 OCT 22:02Z
    GNU Binutils Linker elflink.c bfd_elf_gc_record_vtentry out-of-bounds
    cvelistv5