← Database

CVE-2025-11414

LOW CVSS: 3.3 Published: 2025-10-07 Modified: 2026-06-17

Description

A vulnerability was determined in GNU Binutils 2.45. Affected by this vulnerability is the function get_link_hash_entry of the file bfd/elflink.c of the component Linker. This manipulation causes out-of-bounds read. The attack can only be executed locally. The exploit has been publicly disclosed and may be utilized. Upgrading to version 2.46 addresses this issue. Patch name: aeaaa9af6359c8e394ce9cf24911fec4f4d23703. It is advisable to upgrade the affected component.

Affected Platforms

Gnu Binutils

Weakness Type

CWE-119, CWE-125, CWE-125

References