CVE-2025-11839CWE-252CWE-253

CVE-2025-11839

Low · published October 16, 2025

CVSS v3.1
3.3
EPSS
0%
Percentile
19.0
In the wild
Unconfirmed
What it is

A security flaw has been discovered in GNU Binutils 2.45. Impacted is the function tg_tag_type of the file prdbg.c. Performing a manipulation results in unchecked return value. The attack needs to be approached locally. The exploit has been released to the public and may be used for attacks.

The record
Technical detail
CVSS v3.1
3.3 · LOW
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.00276 · 19.0th percentile
Weaknesses
CWE-252 · Unchecked Return Value; CWE-253 · Incorrect Check of Function Return Value
Published
2025-10-16T18:15Z
Affected products (1)
ProductVersionsFixed in
gnu/binutilsall versions—
References (8)
https://sourceware.org/bugzilla/attachment.cgi?id=16344 · [email protected]https://sourceware.org/bugzilla/show_bug.cgi?id=33448 · [email protected]https://vuldb.com/?ctiid.328774 · [email protected]https://vuldb.com/?id.328774 · [email protected]https://vuldb.com/?submit.661279 · [email protected]https://www.gnu.org/ · [email protected]https://cert-portal.siemens.com/productcert/html/ssa-082556.html · 0b142b55-0307-4c5a-b3c9-f314f3fb7c5ehttps://sourceware.org/bugzilla/show_bug.cgi?id=33448 · 134c704f-9b21-4f2e-91b3-4a467353bcc0
EPSS history
Timeline
  • 16 OCT 14:02Z
    GNU Binutils prdbg.c tg_tag_type return value
    cvelistv5