VULNERABILITY INTELLIGENCE

CVE-2025-11414

CVSS score3.3 LOW
EPSS probability0.21%
CISA KEVNot currently listed
Published2025-10-07
Last modified2026-10-08
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Description

A vulnerability was determined in GNU Binutils 2.45. Affected by this vulnerability is the function get_link_hash_entry of the file bfd/elflink.c of the component Linker. This manipulation causes out-of-bounds read. The attack can only be executed locally. The exploit has been publicly disclosed and may be utilized. Upgrading to version 2.46 addresses this issue. Patch name: aeaaa9af6359c8e394ce9cf24911fec4f4d23703. It is advisable to upgrade the affected component.

Weakness classification

  • cna@vuldb.com: CWE-119
  • nvd@nist.gov: CWE-125

Primary references