CVE-2025-11081

3.3 LOW
Published: September 27, 2025 Modified: October 03, 2025
View on NVD

Description

A vulnerability was detected in GNU Binutils 2.45. This issue affects the function dump_dwarf_section of the file binutils/objdump.c. Performing manipulation results in out-of-bounds read. The attack is only possible with local access. The exploit is now public and may be used. The patch is named f87a66db645caf8cc0e6fc87b0c28c78a38af59b. It is suggested to install a patch to address this issue.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

Login to generate AI explanation

CVSS v3.x Details

0.0 Low Medium High Critical 10.0
Vector String
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory
https://github.com/user-attachments/files/20623354/hdf5_crash_3.txt
Source: cna@vuldb.com
Broken Link
https://sourceware.org/bugzilla/show_bug.cgi?id=33406
Source: cna@vuldb.com
Exploit Issue Tracking
https://sourceware.org/bugzilla/show_bug.cgi?id=33406#c2
Source: cna@vuldb.com
Exploit Issue Tracking
https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=f87a66db645caf8cc0e6fc87b0c28c78a38af59b
Source: cna@vuldb.com
Patch
https://vuldb.com/?ctiid.326122
Source: cna@vuldb.com
Permissions Required VDB Entry
https://vuldb.com/?id.326122
Source: cna@vuldb.com
Third Party Advisory VDB Entry
https://vuldb.com/?submit.661275
Source: cna@vuldb.com
Third Party Advisory VDB Entry
https://www.gnu.org/
Source: cna@vuldb.com
Product

8 reference(s) from NVD

Quick Stats

CVSS v3 Score
3.3 / 10.0
EPSS (Exploit Probability)
0.0%
7th percentile
Exploitation Status
Not in CISA KEV

Weaknesses (CWE)

CWE-119 CWE-125

Affected Vendors

gnu

Related CVEs

CVE-2025-52691 10.0
CVE-2025-15168 7.3
CVE-2025-15167 7.3
CVE-2025-15166 7.3
CVE-2025-15165 7.3