CVE-2025-11839: GNU Binutils

Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days.

A security flaw has been discovered in GNU Binutils 2.45. Impacted is the function tg_tag_type of the file prdbg.c. Performing a manipulation results in unchecked return value. The attack needs to be approached locally. The exploit has been released to the public and may be used for attacks.

Affected products

• GNU Binutils: version 2.45 only

Published 2025-10-16. Last modified 2026-10-09.