Logo
›
›vulnerability›CVE-2025-11081
Name
CVE-2025-11081
Source
NVD ( link)Debian ( link)
Description
A vulnerability was detected in GNU Binutils 2.45. This issue affects the function dump_dwarf_section of the file binutils/objdump.c. Performing manipulation results in out-of-bounds read. The attack is only possible with local access. The exploit is now public and may be used. The patch is named f87a66db645caf8cc0e6fc87b0c28c78a38af59b. It is suggested to install a patch to address this issue.
CWEs
CWE-119
Published Date
Updated Date
Workaround
-
Advisories
https://github.com/user-attachments/files/20623354/hdf5_crash_3.txtBroken Link
https://sourceware.org/bugzilla/show_bug.cgi?id=33406Exploit
https://sourceware.org/bugzilla/show_bug.cgi?id=33406#c2Exploit
https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=f87a66db645caf8cc0e6fc87b0c28c78a38af59bPatch
https://vuldb.com/?ctiid.326122Permissions Required
https://vuldb.com/?id.326122VDB Entry
https://vuldb.com/?submit.661275VDB Entry
https://www.gnu.org/Product

Analysis#

Affected Component
Analysis
binutils
Patched

Vulnerability Ratings#

1.9
CVSSv4
3.3
CVSSv31
5.5
CVSSv31
1.7
CVSSv2
NaN
other

Others affected components#

Name
Project
Project Version
Version
Status
binutils
buildroot
2025.02.x
2.43.1
Not Affected
binutils
buildroot
master
2.45.1
Not Affected
binutils
openwrt
master
2.46.0-r1
Not Affected
binutils
openwrt
openwrt-25.12
2.45.1-r1
Not Affected
binutils
yocto
kirkstone
2.38
Patched
binutils
yocto
master
2.46.1
Not Affected

Resolved with patches#

binutils (yocto:kirkstone)

#
Title
Author
Resolve
1
PR 33406 SEGV in dump_dwarf_section
Alan Modra <amodra@gmail.com>
CVE-2025-11081

binutils (yocto:scarthgap)

#
Title
Author
Resolve
1
PR 33406 SEGV in dump_dwarf_section
Alan Modra <amodra@gmail.com>
CVE-2025-11081