PT-2025-39748

CVE-2025-11081

Published

2025-09-27

Updated

2026-10-09

Description by

CVSS 3.1

5.5

Medium

MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions GNU Binutils version 2.45

Description A flaw exists in GNU Binutils 2.45 within the dump dwarf section function located in the binutils/objdump.c file. Manipulation of the software can lead to an out-of-bounds read. This issue is exploitable with local access. The exploit is publicly available.

Recommendations Install the patch f87a66db645caf8cc0e6fc87b0c28c78a38af59b to address this issue.

Exploitability

Exploit

Fix

Impacts

Researchers

Vendors

Affected products

Weakness enumeration

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE-125: Out-of-bounds Read

Related identifiers