Logo
vulnerabilityCVE-2025-11839
Name
CVE-2025-11839
Source
NVD ( link)Debian ( link)
Description
A security flaw has been discovered in GNU Binutils 2.45. Impacted is the function tg_tag_type of the file prdbg.c. Performing a manipulation results in unchecked return value. The attack needs to be approached locally. The exploit has been released to the public and may be used for attacks.
Published Date
Updated Date
Workaround
-

Analysis#


Affected Component
Analysis
binutils
Patched

Vulnerability Ratings#


1.9
CVSSv4
3.3
CVSSv31
5.5
CVSSv31
1.7
CVSSv2
NaN
other

Others affected components#


Name
Project
Project Version
Version
Status
buildroot
2025.02.x
2.43.1
Not Affected
buildroot
master
2.45.1
Not Affected
openwrt
master
2.46.0-r1
Not Affected
openwrt
openwrt-25.12
2.45.1-r1
Not Affected
yocto
kirkstone
2.38
Patched
yocto
master
2.46.1
Not Affected

Resolved with patches#


binutils (yocto:kirkstone)

#
Title
Author
Resolve
1
Remove call to abort in the DGB debug format printing code,
Nick Clifton <nickc@redhat.com>
CVE-2025-11839

binutils (yocto:scarthgap)

#
Title
Author
Resolve
1
Remove call to abort in the DGB debug format printing code,
Nick Clifton <nickc@redhat.com>
CVE-2025-11839