CVE-2025-11082: GNU Binutils

High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days.

A flaw has been found in GNU Binutils 2.45. Impacted is the function _bfd_elf_parse_eh_frame of the file bfd/elf-eh-frame.c of the component Linker. Executing manipulation can lead to heap-based buffer overflow. The attack is restricted to local execution. The exploit has been published and may be used. This patch is called ea1a0737c7692737a644af0486b71e4a392cbca8. A patch should be applied to remediate this issue. The code maintainer replied with "[f]ixed for 2.46".

Affected products

• GNU Binutils: version 2.45 only

Published 2025-09-27. Last modified 2026-10-09.