{"id":"CVE-2025-11839","title":"A security flaw has been discovered in GNU Binutils 2.45","summary":"A security flaw has been discovered in GNU Binutils 2.45. Impacted is the function tg_tag_type of the file prdbg.c. Performing a manipulation results in unchecked return value. The attack needs to be approached locally. The exploit has b…","severity":"low","cvss":3.3,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cwe":["CWE-252","CWE-253"],"vendor":"gnu","product":"binutils","affected":["binutils = 2.45"],"published":"2025-10-16","updated":"2026-10-09","sourceUpdated":"2026-10-09T10:10:00.193","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2025-11839","references":[{"url":"https://sourceware.org/bugzilla/attachment.cgi?id=16344","label":"cna@vuldb.com"},{"url":"https://sourceware.org/bugzilla/show_bug.cgi?id=33448","label":"cna@vuldb.com"},{"url":"https://vuldb.com/?ctiid.328774","label":"cna@vuldb.com"},{"url":"https://vuldb.com/?id.328774","label":"cna@vuldb.com"},{"url":"https://vuldb.com/?submit.661279","label":"cna@vuldb.com"},{"url":"https://www.gnu.org/","label":"cna@vuldb.com"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-082556.html","label":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://sourceware.org/bugzilla/show_bug.cgi?id=33448","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"tags":["nvd","cve.org","exploit-available"],"epss":0.00276,"epssPercentile":0.19906,"ingestedAt":"2026-10-09T12:53:28.965Z","exploitAvailable":true,"ssvc":{"exploitation":"poc","automatable":"no","technicalImpact":"partial","timestamp":"2025-10-16T14:14:58.421856Z"},"slug":"CVE-2025-11839","body":"## Overview\n\nA security flaw has been discovered in GNU Binutils 2.45. Impacted is the function tg_tag_type of the file prdbg.c. Performing a manipulation results in unchecked return value. The attack needs to be approached locally. The exploit has been released to the public and may be used for attacks.\n\n## Affected\n\n- `binutils = 2.45`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":30,"depthScoreParts":{"impact":18.2,"likelihood":0.1,"exploitation":12,"ransomware":0},"changes":[{"seq":222026,"id":"CVE-2025-11839","ts":1792039913544,"field":"exploit_available","old":"false","new":"true"}]}