CVE-2025-11414

216.73.217.64

· Published 07/10/2025 23:15 · Modified 08/10/2025 19:38

Labels: CVE-2025-11414 2025-10-07 CVE-2025-11414 CWE-119 [email protected]

Essential information

Published: 07/10/2025 23:15
Modified: 08/10/2025 19:38
Author: —
Creator: —
CVSS: 4.8 MEDIUM (v3) 4.8 MEDIUM (v4.0)
CISA KEV: No
CWE: —
CVSS vector: —

CVSS metrics

Description

A vulnerability was determined in GNU Binutils 2.45. Affected by this vulnerability is the function get_link_hash_entry of the file bfd/elflink.c of the component Linker. This manipulation causes out-of-bounds read. The attack can only be executed locally. The exploit has been publicly disclosed and may be utilized. Upgrading to version 2.46 addresses this issue. Patch name: aeaaa9af6359c8e394ce9cf24911fec4f4d23703. It is advisable to upgrade the affected component.

NVD status

Status: Awaiting Analysis — CVE has been recently published to the CVE List and has been received by the NVD.
Source: [email protected]
NVD: View on NVD

Affected products (CPE)

Product	CPE
gnu / binutils	`cpe:2.3:a:gnu:binutils:2.45:::::::*`
gnu / binutils	`cpe:2.3:a:gnu:binutils:<2.46::::::`