CVE-2025-11082

MEDIUM5.3

GNU Binutils Linker elf-eh-frame.c _bfd_elf_parse_eh_frame heap-based overflow

Published Sep 27, 2025

Modified 3 months ago

No fix available

Details

A flaw has been found in GNU Binutils 2.45. Impacted is the function _bfd_elf_parse_eh_frame of the file bfd/elf-eh-frame.c of the component Linker. Executing manipulation can lead to heap-based buffer overflow. The attack is restricted to local execution. The exploit has been published and may be used. This patch is called ea1a0737c7692737a644af0486b71e4a392cbca8. A patch should be applied to remediate this issue. The code maintainer replied with "[f]ixed for 2.46".

References

DETECTIONhttps://sourceware.org/bugzilla/attachment.cgi?id=16358 WEBhttps://sourceware.org/bugzilla/show_bug.cgi?id=33464 WEBhttps://sourceware.org/bugzilla/show_bug.cgi?id=33464#c2 FIXhttps://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=ea1a0737c7692737a644af0486b71e4a392cbca8 WEBhttps://vuldb.com/?ctiid.326123 WEBhttps://vuldb.com/?id.326123 ADVISORYhttps://vuldb.com/?submit.661276 ADVISORYhttps://www.cve.org/CVERecord?id=CVE-2025-11082 WEBhttps://www.gnu.org/

CVSS Analysis

CVSS v3.0

5.3

Exploitability

Attack Vector

LocalAV:L

Attack Complexity

LowAC:L

Privileges Required

LowPR:L

User Interaction

NoneUI:N

Scope

UnchangedS:U

Impact

Confidentiality

LowC:L

Integrity

LowI:L

Availability

LowA:L

5.3/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C

Weakness Type (CWE)

Memory Safety

CWE-119

Buffer Overflow

Other

CWE-122

Ecosystems

Timeline

PublishedSep 27, 2025

ModifiedSep 29, 2025