CVE-2025-11839

ℹ️ low

Summary

A security flaw has been discovered in GNU Binutils 2.45. Impacted is the function tg_tag_type of the file prdbg.c. Performing manipulation results in unchecked return value. The attack needs to be approached locally. The exploit has been released to the public and may be exploited.

CVSS Score

3.3

Low

EPSS Score

0.0

Exploit Probability

Published Date

2025-10-16

First Seen: 2026-01-05

Last Modified 2025-11-06

Source NVD 🔗

CVSS Vector 3.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

CVSS Vector 4.0

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

CWE IDs (Weakness Types)

CWE-252 CWE-253

🔗 References 7

https://sourceware.org/bugzilla/attachment.cgi?id=16344

Broken Link

https://sourceware.org/bugzilla/show_bug.cgi?id=33448

Exploit Issue Tracking

https://vuldb.com/?ctiid.328774

Permissions Required VDB Entry

https://vuldb.com/?id.328774

Third Party Advisory VDB Entry

https://vuldb.com/?submit.661279

Third Party Advisory VDB Entry

https://www.gnu.org/

Product

https://sourceware.org/bugzilla/show_bug.cgi?id=33448

Exploit Issue Tracking

📦 Affected Products 1

Vendor	Product	Status	Affected Versions
gnu	binutils	Affected	v2.45

🔗 Related CVEs 6

CVE ID	Severity	CVSS	EPSS	Summary	Published
CVE-2025-66861	ℹ️ low	2.5	0.0	An issue was discovered in function d_unqualified_name in file cp-demangle.c in BinUtils 2.26 allowing attackers to caus...	2025-12-29
CVE-2025-66862	⚠️ high	7.5	0.1	A buffer overflow vulnerability in function gnu_special in file cplus-dem.c in BinUtils 2.26 allows attackers to cause a...	2025-12-29
CVE-2025-66863	⚠️ high	7.5	0.1	An issue was discovered in function d_discriminator in file cp-demangle.c in BinUtils 2.26 allows attackers to cause a d...	2025-12-29
CVE-2025-66864	⚠️ high	7.5	0.0	An issue was discovered in function d_print_comp_inner in file cp-demangle.c in BinUtils 2.26 allows attackers to cause ...	2025-12-29
CVE-2025-66865	⚠️ high	7.5	0.1	An issue was discovered in function d_print_comp_inner in file cp-demangle.c in BinUtils 2.26 allows attackers to cause ...	2025-12-29
CVE-2025-66866	⚠️ high	7.5	0.0	An issue was discovered in function d_abi_tags in file cp-demangle.c in BinUtils 2.26 allows attackers to cause a denial...	2025-12-29

These CVEs affect the same products