CVE-2025-11414

Name
CVE-2025-11414
Description
A vulnerability was determined in GNU Binutils 2.45. Affected by this vulnerability is the function get_link_hash_entry of the file bfd/elflink.c of the component Linker. This manipulation causes out-of-bounds read. The attack can only be executed locally. The exploit has been publicly disclosed and may be utilized. Upgrading to version 2.46 addresses this issue. Patch name: aeaaa9af6359c8e394ce9cf24911fec4f4d23703. It is advisable to upgrade the affected component.
NVD Severity
unknown
Other trackers
CVE, NVD, CERT, CVE Details, CIRCL, Arch Linux, Debian, Red Hat, Ubuntu, Gentoo, SUSE (Bugzilla), SUSE (CVE), Mageia
Mailing lists
oss-security, full-disclosure, bugtraq
Exploits
Exploit DB, Metasploit
Forges
GitHub (code, issues), Aports (code, issues)

References

Type URI
exploit https://sourceware.org/bugzilla/attachment.cgi?id=16361
issue-tracking https://sourceware.org/bugzilla/show_bug.cgi?id=33450
patch https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=aeaaa9af6359c8e394ce9cf24911fec4f4d23703
signature https://vuldb.com/?ctiid.327350
vdb-entry https://vuldb.com/?id.327350
third-party-advisory https://vuldb.com/?submit.665591
product https://www.gnu.org/

Match rules

CPE URI Source package Min version Max version
binutils == 2.45 == 2.45
binutils == 2.46 == 2.46
cpe:2.3:a:gnu:binutils:2.45:*:*:*:*:*:*:* binutils == None == 2.45

Vulnerable and fixed packages

Source package Branch Version Maintainer Status
binutils edge-main 2.45-r0 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable