CVE-2025-11495CWE-119CWE-122

CVE-2025-11495

Low · published October 9, 2025

CVSS v3.1
3.3
EPSS
0%
Percentile
13.8
In the wild
Unconfirmed
What it is

A vulnerability was determined in GNU Binutils 2.45. The affected element is the function elf_x86_64_relocate_section of the file elf64-x86-64.c of the component Linker. This manipulation causes heap-based buffer overflow. The attack can only be executed locally. The exploit has been publicly disclosed and may be utilized. Patch name: 6b21c8b2ecfef5c95142cbc2c32f185cb1c26ab0. To fix this issue, it is recommended to deploy a patch.

The record
Technical detail
CVSS v3.1
3.3 · LOW
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.00237 · 13.8th percentile
Weaknesses
CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer; CWE-122 · Heap-based Buffer Overflow
Published
2025-10-09T00:15Z
Affected products (1)
ProductVersionsFixed in
gnu/binutilsall versions—
References (9)
https://sourceware.org/bugzilla/attachment.cgi?id=16393 · [email protected]https://sourceware.org/bugzilla/show_bug.cgi?id=33502 · [email protected]https://sourceware.org/bugzilla/show_bug.cgi?id=33502#c3 · [email protected]https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=6b21c8b2ecfef5c95142cbc2c32f185cb1c26ab0 · [email protected]https://vuldb.com/?ctiid.327620 · [email protected]https://vuldb.com/?id.327620 · [email protected]https://vuldb.com/?submit.668290 · [email protected]https://www.gnu.org/ · [email protected]https://cert-portal.siemens.com/productcert/html/ssa-082556.html · 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e
EPSS history
Timeline
  • 08 OCT 20:02Z
    GNU Binutils Linker elf64-x86-64.c elf_x86_64_relocate_section heap-based overflow
    cvelistv5