4.8
Medium
CVE-2025-11494 A vulnerability was found in GNU Binutils 2.45
Description
A vulnerability was found in GNU Binutils 2.45. Impacted is the function _bfd_x86_elf_late_size_sections of the file bfd/elfxx-x86.c of the component Linker. The manipulation results in out-of-bounds read. The attack needs to be approached locally. The exploit has been made public and could be used. The patch is identified as b6ac5a8a5b82f0ae6a4642c8d7149b325f4cc60a. A patch should be applied to remediate this issue.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Binutils | 2.45 | No fix stated |
| SIMATIC S7-1500 CPU 1518-4 PN/DP MFP 3.1 | 3.1.5 → latest | No fix stated |
| SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP 3.1 | 3.1.5 → latest | No fix stated |
| SIPLUS S7-1500 CPU 1518-4 PN/DP MFP 3.1 | 3.1.5 → latest | No fix stated |
References
- VDB-327619 | GNU Binutils Linker elfxx-x86.c _bfd_x86_elf_late_size_sections out-of-bounds vuldb.com
- VDB-327619 | CTI Indicators (IOB, IOC, IOA) vuldb.com
- Submit #668281 | GNU Binutils 2.45 Out-of-Bounds Read vuldb.com
- sourceware.org sourceware.org
- sourceware.org sourceware.org
- sourceware.org sourceware.org
- sourceware.org sourceware.org
- www.gnu.org www.gnu.org
Timeline
- Published
- Last modified
Other CVEs of Binutils
The 43 CVEs of Binutils →
CVE-2026-91782
A vulnerability was detected in GNU Binutils 2.47
4.8
Medium
CVE-2026-91781
A security vulnerability has been detected in GNU Binutils 2.47
4.8
Medium
CVE-2026-91780
A weakness has been identified in GNU Binutils 2.47
4.8
Medium
CVE-2026-91779
A security flaw has been discovered in GNU Binutils 2.47
4.8
Medium