CVE-2025-11839

Summary

A security flaw has been discovered in GNU Binutils 2.45. Impacted is the function tg_tag_type of the file prdbg.c. Performing a manipulation results in unchecked return value. The attack needs to be approached locally. The exploit has been released to the public and may be used for attacks.

Affected Software

Weaknesses

• CWE-252: Unchecked Return Value
• CWE-253: Incorrect Check of Function Return Value

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: poc
  • Automatable: no
  • Technical Impact: partial

Additional References

• https://sourceware.org/bugzilla/show_bug.cgi?id=33448

Additional References

• https://cert-portal.siemens.com/productcert/html/ssa-082556.html

References

• https://vuldb.com/?id.328774
• https://vuldb.com/?ctiid.328774
• https://vuldb.com/?submit.661279
• https://sourceware.org/bugzilla/show_bug.cgi?id=33448
• https://sourceware.org/bugzilla/attachment.cgi?id=16344
• https://www.gnu.org/

• ←Previous
• Next→