CVE-2025-11839

medium

Description

A security flaw has been discovered in GNU Binutils 2.45. Impacted is the function tg_tag_type of the file prdbg.c. Performing manipulation results in unchecked return value. The attack needs to be approached locally. The exploit has been released to the public and may be exploited.

References

https://vuldb.com/?submit.661279

https://vuldb.com/?id.328774

https://sourceware.org/bugzilla/attachment.cgi?id=16344

https://www.gnu.org/

https://vuldb.com/?ctiid.328774

https://sourceware.org/bugzilla/show_bug.cgi?id=33448

Details

Source: Mitre, NVD

Published: 2025-10-16

Updated: 2025-11-06

Risk Information

CVSS v2

Base Score: 1.7

Vector: CVSS2#AV:L/AC:L/Au:S/C:N/I:N/A:P

Severity: Low

CVSS v3

Base Score: 5.5

Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Severity: Medium

CVSS v4

Base Score: 4.8

Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N

Severity: Medium

EPSS

EPSS: 0.00013